CVE-2024-36007

A flaw was found in the Linux kernel's Mellanox Spectrum switch driver (mlxsw). This flaw allows a local user to cause a denial of service (DoS) through an inconsistent driver state. When an error occurs during an Access Control List (ACL) filter migration rehash operation, the driver resets chunk tracking markers without clearing the associated entry markers, resulting in subsequent migration routines processing mismatched data structures.

This vulnerability is rated as Low severity because it requires specialized Mellanox Spectrum switch hardware and only triggers under specific error handling conditions during internal ACL filter rebalancing. Standard Red Hat Enterprise Linux deployments lacking this network switch hardware are not exposed to this issue. Even on systems utilizing affected hardware, the flaw primarily triggers kernel warning messages rather than arbitrary code execution or unprivileged privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.