CVE-2024-38595

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9.0-rc4

Description The vulnerability is related to the net/mlx5 module in the Linux kernel, where a patch change to register devlink flow neglected to reflect changes for peer devlink set logic. This results in a call trace if the peer devlink set is done after devl register. The issue is resolved by aligning the peer devlink set logic with the register devlink flow.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the net/mlx5 module, specifically the patch that aligns the peer devlink set logic with the register devlink flow. If updating is not possible, consider temporarily disabling the devlink rel nested in add function until a patch is available.