CVE-2024-50000

A flaw was found in the Linux kernel's net/mlx5e component. A local attacker could exploit a null pointer dereference vulnerability when the mlx5e_tir_builder_alloc() function fails to allocate memory and returns a NULL value, which is then improperly accessed. This could lead to a system crash, resulting in a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If Mellanox Ethernet network adapters are not in use, the mlx5e kernel module can be prevented from loading by blacklisting it. This will disable any Mellanox Ethernet devices on the system.

To blacklist the module:

1. Create a new modprobe configuration file: echo "blacklist mlx5e" > /etc/modprobe.d/blacklist-mlx5e.conf
2. Rebuild the initial RAM disk: dracut -f
3. Reboot the system for the changes to take effect: reboot

Note that a system reboot is required for this change to be fully applied.