CVE-2024-38542CWE-129

CVE-2024-38542

High · published June 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mana_ib: boundary check before installing cq callbacks

Add a boundary check inside mana_ib_install_cq_cb to prevent index overflow.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-06-19T18:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8.2, < 6.8.126.8.12
linux/linux_kernel≥ 6.9, < 6.9.36.9.3
References (6)
https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 19 JUN 13:35Z
    RDMA/mana_ib: boundary check before installing cq callbacks
    cvelistv5