Security tracker / CVE-2024-38595

CVE-2024-38595

net/mlx5: Fix peer devlink set for SF representor devlink port

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in bf729988303a ("net/mlx5: Restore mistakenly dropped parts in
 carnil> register devlink flow")
 carnil> c6e77aa9dd82 ("net/mlx5: Register devlink first under devlink lock").
 carnil> Vulnerable versions: 6.6.28 6.8.7 6.8.8 6.9-rc4.

Bugs

Status

Branch	Status
upstream	released (6.10-rc1) [3c453e8cc672de1f9c662948dba43176bc68d7f0]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.9-upstream-stable	released (6.9.3) [05d9d7b66836d87c914f8fdd4b062b78e373458d]
6.6-upstream-stable	needed
6.1-upstream-stable	N/A "Vulnerable code not present"
5.10-upstream-stable	N/A "Vulnerable code not present"
4.19-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.8.12-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	N/A "Vulnerable code not present"
5.10-bullseye-security	N/A "Vulnerable code not present"
4.19-buster-security	N/A "Vulnerable code not present"