CVE-2024-47749
RDMA/cxgb4: Added NULL check for lookup_atid
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookup_atid The lookup_atid() function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the `act_establish()` and `act_open_rpl()` functions. Add a NULL check to prevent null pointer dereferencing. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
2.6.35
References 9
git.kernel.org
- stable/c/b12e25d91c7f97958341538c7dc63ee49d01548f
- stable/c/4e1fe68d695af367506ea3c794c5969630f21697
- stable/c/dd598ac57dcae796cb58551074660c39b43fb155
- stable/c/b11318dc8a1ec565300bb1a9073095af817cc508
- stable/c/39cb9f39913566ec5865581135f3e8123ad1aee1
- stable/c/0d50ae281a1712b9b2ca72830a96b8f11882358d
- stable/c/54aaa3ed40972511e423b604324b881425b9ff1e
- stable/c/b9c94c8ba5a713817cffd74c4bacc05187469624
- stable/c/e766e6a92410ca269161de059fff0843b8ddd65f