CVE-2024-46717

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: SHAMPO, Fix incorrect page release

Under the following conditions: 1) No skb created yet 2) header_size == 0 (no SHAMPO header) 3) header_index + 1 % MLX5E_SHAMPO_WQ_HEADER_PER_PAGE == 0 (this is the last page fragment of a SHAMPO header page)

a new skb is formed with a page that is NOT a SHAMPO header page (it is a regular data page). Further down in the same function (mlx5e_handle_rx_cqe_mpwrq_shampo()), a SHAMPO header page from header_index is released. This is wrong and it leads to SHAMPO header pages being released more than once.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 7957837b816f11eecb9146235bb0715478f4c81f, < 03924d117625ecb10ee3c9b65930bcb2c37ae629; >= 7957837b816f11eecb9146235bb0715478f4c81f, < ae9018e3f61ba5cc1f08a6e51d3c0bef0a79f3ab; >= 7957837b816f11eecb9146235bb0715478f4c81f, < c909ab41df2b09cde919801c7a7b6bb2cc37ea22; >= 7957837b816f11eecb9146235bb0715478f4c81f, < 70bd03b89f20b9bbe51a7f73c4950565a17a45f7; a4161e4861132d5b324746a260283e87f2d65daf; >= 5.16.6, < 5.17
LinuxLinux5.17

References

Timeline

Published
Sep 18, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-467185.5In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't overmap identity VRAM mapping Overmapping the identity VCVE-2024-467195.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in trace ucsi_register_CVE-2024-46726.1A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerabiCVE-2024-467205.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive beCVE-2024-467215.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference profile->parent->dentsCVE-2024-467227.1In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mc_data out-of-bounds read warning Clear warning that CVE-2024-467237.1In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ucode out-of-bounds read warning Clear warning that reCVE-2024-467247.1In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number Check theCVE-2024-467257.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds write warning Check the ring type value CVE-2024-467265.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow [WHY & HOWCVE-2024-467275.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otg_master NULL check within resource_log_pipe_topCVE-2024-467285.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for aux_rd_interval before using aux_rd_i
CVE-2024-46717: Medium severity, CVSS 5.5 | Vulnix