CVE-2024-42073 mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Memory Leak and Use-After Fixes in mlxsw Spectrum ACL TCAM Two vulnerabilities, CVE-2024-35853 and CVE-2024-35854, were addressed in the mlxsw spectrum_acl_tcam component. CVE-2024-35853 involves a memory leak during rehashing, while CVE-2024-35854 addresses a potential use-after-free issue. Both vulnerabilities were published on May 17, 2024, affecting systems utilizing this component. 5 sources 41