Ubuntu: (Multiple Advisories) (CVE-2024-36281): Linux kernel vulnerabilities

Ubuntu: (Multiple Advisories) (CVE-2024-36281): Linux kernel vulnerabilities

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

06/21/2024

Created

09/13/2024

Added

09/12/2024

Modified

01/28/2025

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules rx_create no longer allocates a modify_hdr instance that needs to be cleaned up. The mlx5_modify_header_dealloc call will lead to a NULL pointer dereference. A leak in the rules also previously occurred since there are now two rules populated related to status. BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 109907067 P4D 109907067 PUD 116890067 PMD 0 Oops: 0000 [#1] SMP CPU: 1 PID: 484 Comm: ip Not tainted 6.9.0-rc2-rrameshbabu+ #254 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.16.3-1-1 04/01/2014 RIP: 0010:mlx5_modify_header_dealloc+0xd/0x70 <snip> Call Trace: <TASK> ? show_regs+0x60/0x70 ? __die+0x24/0x70 ? page_fault_oops+0x15f/0x430 ? free_to_partial_list.constprop.0+0x79/0x150 ? do_user_addr_fault+0x2c9/0x5c0 ? exc_page_fault+0x63/0x110 ? asm_exc_page_fault+0x27/0x30 ? mlx5_modify_header_dealloc+0xd/0x70 rx_create+0x374/0x590 rx_add_rule+0x3ad/0x500 ? rx_add_rule+0x3ad/0x500 ? mlx5_cmd_exec+0x2c/0x40 ? mlx5_create_ipsec_obj+0xd6/0x200 mlx5e_accel_ipsec_fs_add_rule+0x31/0xf0 mlx5e_xfrm_add_state+0x426/0xc00 <snip>

Solution(s)

• ubuntu-upgrade-linux-image-6-8-0-1010-gke
• ubuntu-upgrade-linux-image-6-8-0-1011-raspi
• ubuntu-upgrade-linux-image-6-8-0-1012-ibm
• ubuntu-upgrade-linux-image-6-8-0-1012-oem
• ubuntu-upgrade-linux-image-6-8-0-1012-oracle
• ubuntu-upgrade-linux-image-6-8-0-1012-oracle-64k
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-64k
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-1013-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-6-8-0-1014-azure
• ubuntu-upgrade-linux-image-6-8-0-1014-azure-fde
• ubuntu-upgrade-linux-image-6-8-0-1014-gcp
• ubuntu-upgrade-linux-image-6-8-0-1015-aws
• ubuntu-upgrade-linux-image-6-8-0-44-generic
• ubuntu-upgrade-linux-image-6-8-0-44-generic-64k
• ubuntu-upgrade-linux-image-6-8-0-44-lowlatency
• ubuntu-upgrade-linux-image-6-8-0-44-lowlatency-64k
• ubuntu-upgrade-linux-image-6-8-0-45-generic
• ubuntu-upgrade-linux-image-6-8-0-45-generic-64k
• ubuntu-upgrade-linux-image-aws
• ubuntu-upgrade-linux-image-azure
• ubuntu-upgrade-linux-image-azure-fde
• ubuntu-upgrade-linux-image-gcp
• ubuntu-upgrade-linux-image-generic
• ubuntu-upgrade-linux-image-generic-64k
• ubuntu-upgrade-linux-image-generic-64k-hwe-22-04
• ubuntu-upgrade-linux-image-generic-64k-hwe-24-04
• ubuntu-upgrade-linux-image-generic-hwe-22-04
• ubuntu-upgrade-linux-image-generic-hwe-24-04
• ubuntu-upgrade-linux-image-generic-lpae
• ubuntu-upgrade-linux-image-gke
• ubuntu-upgrade-linux-image-ibm
• ubuntu-upgrade-linux-image-ibm-classic
• ubuntu-upgrade-linux-image-ibm-lts-24-04
• ubuntu-upgrade-linux-image-kvm
• ubuntu-upgrade-linux-image-lowlatency
• ubuntu-upgrade-linux-image-lowlatency-64k
• ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04
• ubuntu-upgrade-linux-image-lowlatency-hwe-22-04
• ubuntu-upgrade-linux-image-nvidia
• ubuntu-upgrade-linux-image-nvidia-6-8
• ubuntu-upgrade-linux-image-nvidia-64k
• ubuntu-upgrade-linux-image-nvidia-64k-6-8
• ubuntu-upgrade-linux-image-nvidia-lowlatency
• ubuntu-upgrade-linux-image-nvidia-lowlatency-64k
• ubuntu-upgrade-linux-image-oem-22-04
• ubuntu-upgrade-linux-image-oem-22-04a
• ubuntu-upgrade-linux-image-oem-22-04b
• ubuntu-upgrade-linux-image-oem-22-04c
• ubuntu-upgrade-linux-image-oem-22-04d
• ubuntu-upgrade-linux-image-oracle
• ubuntu-upgrade-linux-image-oracle-64k
• ubuntu-upgrade-linux-image-raspi
• ubuntu-upgrade-linux-image-virtual
• ubuntu-upgrade-linux-image-virtual-hwe-22-04
• ubuntu-upgrade-linux-image-virtual-hwe-24-04

References

• https://attackerkb.com/topics/cve-2024-36281
• CVE - 2024-36281
• USN-6999-1
• USN-6999-2
• USN-7004-1
• USN-7005-1
• USN-7005-2
• USN-7008-1
• USN-7029-1

View more