CVE-2024-50146

A flaw was found in the Linux kernel's net/mlx5e module. A local attacker with privileges to unload kernel modules could exploit this vulnerability by interrupting the driver unloading process when a profile rollback fails. This can lead to a kernel null pointer dereference and a system crash, resulting in a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the mlx5_core kernel module from loading. This can be achieved by creating a blacklist entry.

1. Create a file /etc/modprobe.d/blacklist-mlx5_core.conf with the following content:

   blacklist mlx5_core
   

2. Reboot the system for the changes to take effect.

This mitigation will prevent the mlx5_core module and its dependencies from loading, which may impact network functionality if Mellanox network adapters are in use.