{ "cveId": "CVE-2024-50147", "url": "https://patchblox.com/security/cve/CVE-2024-50147", "summary": "CVE-2024-50147 is fixed in 47 products on 1 platform, first by DEBIAN-CVE-2024-50147, released November 7, 2024. It is not reported as exploited. Patch Radar priority: Routine.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command bitmask initialization Co...", "description": "In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command bitmask initialization Command bitmask have a dedicated bit for MANAGE_PAGES command, this bit isn\u0027t Initialize during command bitmask Initialization, only during MANAGE_PAGES. In addition, mlx5_cmd_trigger_completions() is trying to trigger completion for MANAGE_PAGES command as well. Hence, in case health error occurred before any MANAGE_PAGES command have been invoke (for example, during mlx5_enable_hca()), mlx5_cmd_trigger_completions() will try to trigger completion for MANAGE_PAGES command, which will result in null-ptr-deref error.[1] Fix it by Initialize command bitmask correctly. While at it, re-write the code for better understanding. [1] BUG: KASAN: null-ptr-deref in mlx5_cmd_trigger_completions\u002B0x1db/0x600 [mlx5_core] Write of size 4 at addr 0000000000000214 by task kworker/u96:2/12078 CPU: 10 PID: 12078 Comm: kworker/u96:2 Not tainted 6.9.0-rc2_for_upstream_debug_2024_04_07_19_01 #1 Hardware name: QEMU Standard PC (Q35 \u002B ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Workqueue: mlx5_health0000:08:00.0 mlx5_fw_fatal_reporter_err_work [mlx5_core] Call Trace: \u003CTASK\u003E dump_stack_lvl\u002B0x7e/0xc0 kasan_report\u002B0xb9/0xf0 kasan_check_range\u002B0xec/0x190 mlx5_cmd_trigger_completions\u002B0x1db/0x600 [mlx5_core] mlx5_cmd_flush\u002B0x94/0x240 [mlx5_core] enter_error_state\u002B0x6c/0xd0 [mlx5_core] mlx5_fw_fatal_reporter_err_work\u002B0xf3/0x480 [mlx5_core] process_one_work\u002B0x787/0x1490 ? lockdep_hardirqs_on_prepare\u002B0x400/0x400 ? pwq_dec_nr_in_flight\u002B0xda0/0xda0 ? assign_work\u002B0x168/0x240 worker_thread\u002B0x586/0xd30 ? rescuer_thread\u002B0xae0/0xae0 kthread\u002B0x2df/0x3b0 ? kthread_complete_and_exit\u002B0x20/0x20 ret_from_fork\u002B0x2d/0x70 ? kthread_complete_and_exit\u002B0x20/0x20 ret_from_fork_asm\u002B0x11/0x20 \u003C/TASK\u003E", "published": "2024-11-07T10:15:06Z", "severity": "medium", "cvss": 5.5, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "epss": 0.00231, "epssPercentile": 0.14032, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.20.1", "fix": "SUSE-SU-2024:4316-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4316-1", "released": "2024-12-13T15:24:02Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.20.1", "fix": "SUSE-SU-2024:4316-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4316-1", "released": "2024-12-13T15:24:02Z" }, { "platform": "linux", "product": "kernel-coco", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.9.coco15sp6.1", "fix": "SUSE-SU-2024:4387-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4387-1", "released": "2024-12-19T15:39:02Z" }, { "platform": "linux", "product": "kernel-coco_debug", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.9.coco15sp6.1", "fix": "SUSE-SU-2024:4387-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4387-1", "released": "2024-12-19T15:39:02Z" }, { "platform": "linux", "product": "kernel-debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1.150600.12.12.6", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1.150600.12.12.6", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-devel", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-headers", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-libbpf", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.1.115-126.197", "release": "amzn 2023", "fixedVersion": "1.0-0.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6-RT_Update_6", "release": "sles 15.6", "fixedVersion": "1-150600.1.3.1", "fix": "SUSE-SU-2024:4314-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4314-1", "released": "2024-12-13T15:23:16Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6_Update_6", "release": "sles 15.6", "fixedVersion": "1-150600.13.3.5", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.20.1", "fix": "SUSE-SU-2024:4314-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4314-1", "released": "2024-12-13T15:23:16Z" }, { "platform": "linux", "product": "kernel-rt_debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.20.1", "fix": "SUSE-SU-2024:4314-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4314-1", "released": "2024-12-13T15:23:16Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.20.1", "fix": "SUSE-SU-2024:4316-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4316-1", "released": "2024-12-13T15:24:02Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.20.1", "fix": "SUSE-SU-2024:4316-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4316-1", "released": "2024-12-13T15:24:02Z" }, { "platform": "linux", "product": "kernel-source-coco", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.9.coco15sp6.1", "fix": "SUSE-SU-2024:4387-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4387-1", "released": "2024-12-19T15:39:02Z" }, { "platform": "linux", "product": "kernel-source-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.20.1", "fix": "SUSE-SU-2024:4314-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4314-1", "released": "2024-12-13T15:23:16Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.20.1", "fix": "SUSE-SU-2024:4316-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4316-1", "released": "2024-12-13T15:24:02Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.20.1", "fix": "SUSE-SU-2024:4316-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4316-1", "released": "2024-12-13T15:24:02Z" }, { "platform": "linux", "product": "kernel-syms-coco", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.9.coco15sp6.1", "fix": "SUSE-SU-2024:4387-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4387-1", "released": "2024-12-19T15:39:02Z" }, { "platform": "linux", "product": "kernel-syms-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.20.1", "fix": "SUSE-SU-2024:4314-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4314-1", "released": "2024-12-13T15:23:16Z" }, { "platform": "linux", "product": "kernel-tools", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.30.1", "fix": "SUSE-SU-2024:4318-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-4318-1", "released": "2024-12-13T15:33:38Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.115-1", "fix": "DEBIAN-CVE-2024-50147", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-50147", "released": "2024-11-07T10:15:06Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.11.6-1", "fix": "DEBIAN-CVE-2024-50147", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-50147", "released": "2024-11-07T10:15:06Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.11.6-1", "fix": "DEBIAN-CVE-2024-50147", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-50147", "released": "2024-11-07T10:15:06Z" }, { "platform": "linux", "product": "perf", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" }, { "platform": "linux", "product": "python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.115-126.197.amzn2023", "fix": "ALAS2023-2025-794", "url": "https://patchblox.com/security/fix/linux/alas2023-2025-794", "released": "2025-01-06T19:21:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }