CVE-2024-44970

CVE-2024-44970

Critical · published September 4, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink

When all the strides in a WQE have been consumed, the WQE is unlinked

from the WQ linked list (mlx5_wq_ll_pop()). For SHAMPO, it is possible

to receive CQEs with 0 consumed strides for the same WQE even after the

WQE is fully consumed and unlinked. This triggers an additional unlink

for the same wqe which corrupts the linked list.

Fix this scenario by accepting 0 sized consumed strides without

unlinking the WQE again.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00564 · 46.2th percentile
Published
2024-09-04T23:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel< 6.1.1056.1.105
linux/linux_kernel≥ 6.2, < 6.6.466.6.46
linux/linux_kernel≥ 6.7, < 6.10.56.10.5
References (5)
EPSS history
Timeline
  • 04 SEP 18:56Z
    net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink
    cvelistv5