CVE-2024-41079

CVE-2024-41079

High · published July 29, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nvmet: always initialize cqe.result

The spec doesn't mandate that the first two double words (aka results)

for the command queue entry need to be set to 0 when they are not

used (not specified). Though, the target implemention returns 0 for TCP

and FC but not for RDMA.

Let's make RDMA behave the same and thus explicitly initializing the

result field. This prevents leaking any data from the stack.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00636 · 49.8th percentile
Published
2024-07-29T19:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel< 6.1.1016.1.101
linux/linux_kernel≥ 6.2, < 6.6.426.6.42
linux/linux_kernel≥ 6.7, < 6.9.116.9.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (10)
EPSS history
Timeline
  • 29 JUL 15:04Z
    nvmet: always initialize cqe.result
    cvelistv5