CVE-2024-57936

CVE-2024-57936

Critical · published January 21, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Fix max SGEs for the Work Request

Gen P7 supports up to 13 SGEs for now. WQE software structure

can hold only 6 now. Since the max send sge is reported as

13, the stack can give requests up to 13 SGEs. This is causing

traffic failures and system crashes.

Use the define for max SGE supported for variable size. This

will work for both static and variable WQEs.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00405 · 33.6th percentile
Published
2025-01-21T17:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 6.12, < 6.12.96.12.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/3de1b50f055dc2ca7072a526cdda21f691c22dd9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/79d330fbdffd8cee06d8bdf38d82cb62d8363a27 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9a479088e0c8f6140b8c7752b563bc8c6c6dcc8c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 21 JAN 12:01Z
    RDMA/bnxt_re: Fix max SGEs for the Work Request
    cvelistv5