Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-40990

RDMA/mlx5: Add check for srq max_sge attribute

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq max_sge attribute max_sge attribute is passed by the user, and is inserted and used unchecked, so verify that the value doesn't exceed maximum allowed value before using it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to < 7186b81c1f15e39069b1af172c6a951728ed3511affected
  • e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to < 1e692244bf7dd827dd72edc6c4a3b36ae572f03caffected
  • e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to < 999586418600b4b3b93c2a0edd3a4ca71ee759bfaffected
  • e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to < e0deb0e9c967b61420235f7f17a4450b4b4d6ce2affected
  • e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to < 4ab99e3613139f026d2d8ba954819e2876120ab3affected
  • e126ba97dba9edeb6fafa3665b5f8497fc9cdf8c to < 36ab7ada64caf08f10ee5a114d39964d1f91e81daffected

Linux Linux

Default version status: affected

  • 3.11affected
  • 0 to < 3.11unaffected
  • 5.10.221 to ≤ 5.10.*unaffected
  • 5.15.162 to ≤ 5.15.*unaffected
  • 6.1.96 to ≤ 6.1.*unaffected
  • 6.6.36 to ≤ 6.6.*unaffected
  • 6.9.7 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References