CVE-2024-50147

A flaw was found in the net/mlx5 driver of the Linux kernel. Incorrect initialization of the command bitmask for the MANAGE_PAGES command can lead to a null-pointer dereference in mlx5_cmd_trigger_completions() if a health error occurs before the MANAGE_PAGES command is invoked. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the mlx5_core kernel module from loading. This can be achieved by blacklisting the module. Create a file named /etc/modprobe.d/blacklist-mlx5_core.conf with the following content: blacklist mlx5_core After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This mitigation may impact functionality if Mellanox network adapters are in use.