CVE-2024-35885

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

mlxbf_gige: stop interface during shutdown

The mlxbf_gige driver intermittantly encounters a NULL pointer

exception while the system is shutting down via "reboot" command.

The mlxbf_driver will experience an exception right after executing

its shutdown() method. One example of this exception is:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000070

Mem abort info:

ESR = 0x0000000096000004

EC = 0x25: DABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

FSC = 0x04: level 0 translation fault

Data abort info:

ISV = 0, ISS = 0x00000004

CM = 0, WnR = 0

user pgtable: 4k pages, 48-bit VAs, pgdp=000000011d373000

[0000000000000070] pgd=0000000000000000, p4d=0000000000000000

Internal error: Oops: 96000004 [#1] SMP

CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G S OE 5.15.0-bf.6.gef6992a #1

Hardware name: https://www.mellanox.com BlueField SoC/BlueField SoC, BI

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References