{ "schemaVersion": 1, "attribution": [ { "source": "CISA Known Exploited Vulnerabilities", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "licence": "US government work" }, { "source": "GitHub Advisory Database", "url": "https://github.com/advisories", "licence": "CC BY 4.0" }, { "source": "Have I Been Pwned", "url": "https://haveibeenpwned.com/", "licence": "CC BY 4.0" }, { "source": "CVE Program (CVE records)", "url": "https://www.cve.org/Legal/TermsOfUse", "licence": "CVE Terms of Use", "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.", "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy." }, { "source": "FIRST EPSS", "url": "https://www.first.org/epss/", "licence": "free to use; FIRST requests attribution" } ], "record": { "id": "CVE-2024-36007", "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-36007", "idYear": 2024, "status": "PUBLISHED", "publishedAt": "2024-05-20T09:48:06.947Z", "updatedAt": "2026-10-15T00:42:11.512Z", "importedAt": "2026-10-24T01:57:11.582Z", "snapshot": { "id": "cve_2026-10-24_midnight_baseline", "at": "2026-10-24T00:00:00.000Z", "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z" }, "facts": { "title": "mlxsw: spectrum_acl_tcam: Fix warning during rehash", "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nmlxsw: spectrum_acl_tcam: Fix warning during rehash\n\nAs previously explained, the rehash delayed work migrates filters from\none region to another. This is done by iterating over all chunks (all\nthe filters with the same priority) in the region and in each chunk\niterating over all the filters.\n\nWhen the work runs out of credits it stores the current chunk and entry\nas markers in the per-work context so that it would know where to resume\nthe migration from the next time the work is scheduled.\n\nUpon error, the chunk marker is reset to NULL, but without resetting the\nentry markers despite being relative to it. This can result in migration\nbeing resumed from an entry that does not belong to the chunk being\nmigrated. In turn, this will eventually lead to a chunk being iterated\nover as if it is an entry. Because of how the two structures happen to\nbe defined, this does not lead to KASAN splats, but to warnings such as\n[1].\n\nFix by creating a helper that resets all the markers and call it from\nall the places the currently only reset the chunk marker. For good\nmeasures also call it when starting a completely new rehash. Add a\nwarning to avoid future cases.\n\n[1]\nWARNING: CPU: 7 PID: 1076 at drivers/net/ethernet/mellanox/mlxsw/core_acl_flex_keys.c:407 mlxsw_afk_encode+0x242/0x2f0\nModules linked in:\nCPU: 7 PID: 1076 Comm: kworker/7:24 Tainted: G W 6.9.0-rc3-custom-00880-g29e61d91b77b #29\nHardware name: Mellanox Technologies Ltd. MSN3700/VMOD0005, BIOS 5.11 01/06/2019\nWorkqueue: mlxsw_core mlxsw_sp_acl_tcam_vregion_rehash_work\nRIP: 0010:mlxsw_afk_encode+0x242/0x2f0\n[...]\nCall Trace:\n \n mlxsw_sp_acl_atcam_entry_add+0xd9/0x3c0\n mlxsw_sp_acl_tcam_entry_create+0x5e/0xa0\n mlxsw_sp_acl_tcam_vchunk_migrate_all+0x109/0x290\n mlxsw_sp_acl_tcam_vregion_rehash_work+0x6c/0x470\n process_one_work+0x151/0x370\n worker_thread+0x2cb/0x3e0\n kthread+0xd0/0x100\n ret_from_fork+0x34/0x50\n ", "affected": [ { "vendor": "Linux", "product": "Linux", "defaultStatus": "unaffected", "versions": [ { "version": "6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf", "status": "affected", "versionType": "git", "lessThan": "0b88631855026b55cad901ac28d081e0f358e596" }, { "version": "6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf", "status": "affected", "versionType": "git", "lessThan": "1d76bd2a0034d0d08045c1c6adf2235d88982952" }, { "version": "6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf", "status": "affected", "versionType": "git", "lessThan": "039992b6d2df097c65f480dcf269de3d2656f573" }, { "version": "6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf", "status": "affected", "versionType": "git", "lessThan": "751d352858108314efd33dddd5a9a2b6bf7d6916" }, { "version": "6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf", "status": "affected", "versionType": "git", "lessThan": "e890456051fe8c57944b911defb3e6de91315861" }, { "version": "6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf", "status": "affected", "versionType": "git", "lessThan": "17e9e0bbae652b9b2049e51699e93dfa60b2988d" }, { "version": "6f9579d4e3021b17b0a4cde6b04a6c94c9575cdf", "status": "affected", "versionType": "git", "lessThan": "743edc8547a92b6192aa1f1b6bb78233fa21dc9b" } ] }, { "vendor": "Linux", "product": "Linux", "defaultStatus": "affected", "versions": [ { "version": "5.1", "status": "affected" }, { "version": "0", "status": "unaffected", "versionType": "semver", "lessThan": "5.1" }, { "version": "5.4.275", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.4.*" }, { "version": "5.10.216", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.10.*" }, { "version": "5.15.158", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "5.15.*" }, { "version": "6.1.90", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "6.1.*" }, { "version": "6.6.30", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "6.6.*" }, { "version": "6.8.9", "status": "unaffected", "versionType": "semver", "lessThanOrEqual": "6.8.*" }, { "version": "6.9", "status": "unaffected", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*" } ] } ] } } }