Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — net/mlx5e: Fix CT entry update leaks of modify header context
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0047 38.6 —
AFFECTED
Product Versions Fixed
Linux 94ceffb48eac7692677d8093dcde6965b70c4b35 – —
Linux 6.3 – 6.6.45
TIMELINE
Aug 17 Reserved by Linux
Aug 20 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-43864 (Linux). CVSS 9.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix CT entry update leaks of modify header context
The cited commit allocates a new modify header to replace the old
one when updating CT entry. But if failed to allocate a new one, eg.
exceed the max number firmware can support, modify header will be
an error pointer that will trigger a panic when deallocating it. And
the old modify header point is copied to old attr. When the old
attr is freed, the old modify header is lost.
Fix it by restoring the old attr to attr when failed to allocate a
new modify header context. So when the CT entry is freed, the right
modify header context will be freed. And the panic of accessing
error pointer is also fixed.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| August 17, 2024 | Reserved | Reserved by Linux |
| August 20, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-43864 (Linux). CVSS 9.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 94ceffb48eac7692677d8093dcde6965b70c4b35 | — |
| Linux | Linux | — | 6.3 | 6.6.45 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-43864 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.