CVE-2024-46717

under certain conditions-- no created skb, header_size == 0, and header_index + 1 % MLX5E_SHAMPO_WQ_HEADER_PER_PAGE == 0 -- a new skb is formed with no SHAMPO header, but a SHAMPO header page from header_index is released further down in the same function, leading to SHAMPO pages being released multiple times, which is incorrect.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module mlx5_core from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.