CVE Database›Document archive›CVE-2024-26858

CVE-2024-26858

kernel: net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map

Loading…

Severity

Moderate

Red Hat Product Security

4.1

CVSS 3.1

Review impact separately from score.

Published · April 17, 2024

Updated · October 29, 2026

Description

A vulnerability was found in the mlx5e_txwqe_complete() function in the Linux kernel. The CPU or compiler may reorder two of the functions: mlx5e_ptp_metadata_map_put() and mlx5e_ptpsq_track_metadata(), and a situation could arise where metadata tracking occurs before the metadata map is fully populated. This could lead to a NULL pointer dereference which can cause crashes.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 4.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference