CVE-2024-38542

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38542
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: boundary check before installing cq callbacks Add a boundary check inside mana_ib_install_cq_cb to prevent index overflow.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 Patch
https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 Patch
https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 Patch
https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 Patch
https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 Patch
https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

01 Apr 2025, 18:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 - () https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 - Patch
References () https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 - () https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 - Patch
References () https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 - () https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-129

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 - () https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 -
References () https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 - () https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 -
References () https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 - () https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 -

07 Nov 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

20 Jun 2024, 12:44

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: RDMA/mana_ib: verificación de los límites antes de instalar devoluciones de llamadas de cq Agregue una verificación de los límites dentro de mana_ib_install_cq_cb para evitar el desbordamiento del índice.

19 Jun 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-19 14:15

Updated : 2025-04-01 18:36

NVD link : CVE-2024-38542

Mitre link : CVE-2024-38542

CVE.ORG link : CVE-2024-38542

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index