Vulnerability feed

Executive summary

This advisory covers a resource leak in the Linux kernel mlxsw driver, which handles Mellanox/NVIDIA Spectrum switch hardware. The leak occurs when flower classifier templates are created, so port range hardware registers are not released. The advisory does not state a severity rating, and the text describes the fix as a kernel stable tree patch rather than giving explicit upgrade instructions.

Technical summary

The flaw is a resource leak (missing release of port range registers) in mlxsw_sp_flower_tmplt_create() in the Linux kernel's spectrum_flower code. A stack-local rule structure parsed from a flow_cls_offload template could acquire port range registers that were never freed, including through chain template deletion. The fix factors the resource release code out of mlxsw_sp_acl_rulei_destroy() into mlxsw_sp_acl_rulei_free() and calls it from tmplt_create(). The advisory names commit 7ea07afb230f1342ab0f9365edd0aae137f425d3 and a Fixes tag referencing fe22f7410527, but does not state affected or fixed kernel version numbers, attack vector, privileges required, CVSS score, workarounds, or detection guidance. Those points are not stated.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/3938430f0237c59…6a366e7657b2b7f8d0bb

Score

No CVSS score published.

Affects

LinuxLinuxLinux kernelLinux mlxsw