Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-40999

net: ena: Add validation for completion descriptors consistency

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that `first` flag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a reset will occur. A new reset reason for RX data corruption has been added.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1738cd3ed342294360d6a74d4e58800004bff854 to < 4f163a8035e76e835a984cf548b3e6922cfe145faffected
  • 1738cd3ed342294360d6a74d4e58800004bff854 to < edb9a302cc9386142beffe5d9bbe4bfd36999eeeaffected
  • 1738cd3ed342294360d6a74d4e58800004bff854 to < 42146ee5286f16f1674a84f7c274dcca65c6ff2eaffected
  • 1738cd3ed342294360d6a74d4e58800004bff854 to < b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7affected

Linux Linux

Default version status: affected

  • 4.9affected
  • 0 to < 4.9unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.9.7 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References