CVE-2024-27046

nfp: flower: handle acti_netdevs allocation failure

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
21.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nfp: flower: handle acti_netdevs allocation failure

The kmalloc_array() in nfp_fl_lag_do_work() will return null, if

the physical memory has run out. As a result, if we dereference

the acti_netdevs, the null pointer dereference bugs will happen.

This patch adds a check to judge whether allocation failure occurs.

If it happens, the delayed work will be rescheduled and try again.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.2th percentile
Published
2024-05-01T12:54Z
EPSS history
Timeline
  • 01 MAY 12:54Z
    nfp: flower: handle acti_netdevs allocation failure
    cvelistv5