CVE-2024-50158: RDMA/bnxt_re: Fix out of bound check
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxtre: Fix out of bound check
Driver exports pacing stats only on GenP5 and P7 adapters. But while parsing the pacing stats, driver has a check for "rdev->dbrpacing". This caused a trace when KASAN is enabled.
BUG: KASAN: slab-out-of-bounds in bnxtregethwstats+0x2b6a/0x2e00 [bnxtre] Write of size 8 at addr ffff8885942a6340 by task modprobe/4809
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50158?
CVE-2024-50158 is considered a moderate severity vulnerability in the Linux kernel.
What versions of the Linux kernel are affected by CVE-2024-50158?
CVE-2024-50158 affects Linux kernel versions between 6.7 and 6.6.59, as well as 6.12-rc1, 6.12-rc2, and 6.12-rc3.
How do I fix CVE-2024-50158?
To fix CVE-2024-50158, update the Linux kernel to a version that addresses this vulnerability.
What types of devices does CVE-2024-50158 impact?
CVE-2024-50158 impacts systems using the RDMA (Remote Direct Memory Access) feature in the Linux kernel, specifically on GenP5 and P7 adapters.
What is the cause of CVE-2024-50158?
CVE-2024-50158 was caused by an out of bound check in the RDMA/bnxt_re driver when parsing pacing stats.