← CVE Intelligence

CVE-2024-40990

RDMA/mlx5: Add check for srq max_sge attribute PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq max_sge attribute max_sge attribute is passed by the user, and is inserted and used unchecked, so verify that the value doesn't exceed maximum allowed value before using it.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c before 7186b81c1f15e39069b1af172c6a951728ed3511; affected e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c before 1e692244bf7dd827dd72edc6c4a3b36ae572f03c; affected e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c before 999586418600b4b3b93c2a0edd3a4ca71ee759bf; affected e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c before e0deb0e9c967b61420235f7f17a4450b4b4d6ce2; affected e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c before 4ab99e3613139f026d2d8ba954819e2876120ab3; affected e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c before 36ab7ada64caf08f10ee5a114d39964d1f91e81d
Linux / Linuxaffected 3.11; unaffected 0 before 3.11; unaffected 5.10.221 through 5.10.*; unaffected 5.15.162 through 5.15.*; unaffected 6.1.96 through 6.1.*; unaffected 6.6.36 through 6.6.*; unaffected 6.9.7 through 6.9.*; unaffected 6.10 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.