First published: Mon Oct 21 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is freed before ib_unregister_device() is called on HIP08. During the time interval, users can still dereg MR and rsv_qp will be used in this process, leading to a UAF. Move the release of rsv_qp after calling ib_unregister_device() to fix it.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
Linux Kernel | >=5.18<6.1.113 | |
Linux Kernel | >=6.2<6.6.54 | |
Linux Kernel | >=6.7<6.10.13 | |
Linux Kernel | >=6.11<6.11.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-47750 is classified as a vulnerability in the Linux kernel that can lead to a use-after-free condition.
CVE-2024-47750 affects multiple versions of the Linux kernel between 5.18 and 6.1.113, 6.2 and 6.6.54, 6.7 and 6.10.13, as well as 6.11 and 6.11.2.
To fix CVE-2024-47750, users should update their Linux kernel to a patched version that addresses this vulnerability.
If CVE-2024-47750 is not addressed, it may allow attackers to exploit the use-after-free condition, possibly leading to system instability or unauthorized access.
CVE-2024-47750 is specifically noted to affect the HIP08 hardware platform in the context of RDMA operations.