net/mlx5: fs, delete the FTE when there are no rules attached to it
Summary
GSD-2022-1003379: net/mlx5: fs, delete the FTE when there are no rules attached to it. Affects Kernel versions < 77d7fb14890f4dbea2c863d00d52c9946145d93e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The net/mlx5 package is a part of the Linux Kernel ecosystem and is responsible for managing the Mellanox ConnectX network adapters. It provides the necessary drivers and functionality to enable high-performance networking on these devices. The package includes various components, including the fs module, which handles the flow steering (FS) functionality. FS allows the network adapter to classify and direct incoming packets based on predefined rules.
Vulnerability Detail
The vulnerability in net/mlx5 fs module allows for the deletion of the Flow Table Entry (FTE) even when there are no rules attached to it. This can lead to unexpected behavior and potential security risks. An attacker could exploit this vulnerability to manipulate the network traffic or disrupt the normal functioning of the network adapter. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The net/mlx5 fs module in the Linux Kernel is vulnerable to a flaw that allows the deletion of a Flow Table Entry (FTE) even when no rules are attached to it. This vulnerability has been fixed in Linux Kernel version v5.15.46. It is recommended to update the Kernel to this version or a later one to ensure the security of the system. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The net/mlx5 package is a component of the Linux Kernel ecosystem that provides drivers and functionality for Mellanox ConnectX network adapters.
The fs module in net/mlx5 is responsible for handling the flow steering functionality, which allows the network adapter to classify and direct incoming packets based on predefined rules.
A Flow Table Entry (FTE) is a data structure used by the fs module to store information about a specific flow and its associated rules.
The vulnerability could be exploited by an attacker to manipulate network traffic or disrupt the normal functioning of the network adapter.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
