Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-26872

RDMA/srpt: Do not register event handler until srpt device is fully setup

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Do not register event handler until srpt device is fully setup Upon rare occasions, KASAN reports a use-after-free Write in srpt_refresh_port(). This seems to be because an event handler is registered before the srpt device is fully setup and a race condition upon error may leave a partially setup event handler in place. Instead, only register the event handler after srpt device initialization is complete.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a42d985bd5b234da8b61347a78dc3057bf7bb94d to < bdd895e0190c464f54f84579e7535d80276f0fc5affected
  • a42d985bd5b234da8b61347a78dc3057bf7bb94d to < 6413e78086caf7bf15639923740da0d91fdfd090affected
  • a42d985bd5b234da8b61347a78dc3057bf7bb94d to < e362d007294955a4fb929e1c8978154a64efdcb6affected
  • a42d985bd5b234da8b61347a78dc3057bf7bb94d to < 85570b91e4820a0db9d9432098778cafafa7d217affected
  • a42d985bd5b234da8b61347a78dc3057bf7bb94d to < 7104a00fa37ae898a827381f1161fa3286c8b346affected
  • a42d985bd5b234da8b61347a78dc3057bf7bb94d to < ec77fa12da41260c6bf9e060b89234b980c5130faffected
  • a42d985bd5b234da8b61347a78dc3057bf7bb94d to < c21a8870c98611e8f892511825c9607f1e2cd456affected

Linux Linux

Default version status: affected

  • 3.3affected
  • 0 to < 3.3unaffected
  • 5.10.214 to ≤ 5.10.*unaffected
  • 5.15.153 to ≤ 5.15.*unaffected
  • 6.1.83 to ≤ 6.1.*unaffected
  • 6.6.23 to ≤ 6.6.*unaffected
  • 6.7.11 to ≤ 6.7.*unaffected
  • 6.8.2 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References