Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-42162

gve: Account for stopped queues when reading NIC stats

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC stats We now account for the fact that the NIC might send us stats for a subset of queues. Without this change, gve_get_ethtool_stats might make an invalid access on the priv->stats_report->stats array.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2f523dc34ac8c355609e9b847852bf25bbdb30bf to < acf609843a848e2c22ccce98eef109330403380daffected
  • 2f523dc34ac8c355609e9b847852bf25bbdb30bf to < 32675d828c8a392e20d5b42375ed112c407e4b62affected
  • 2f523dc34ac8c355609e9b847852bf25bbdb30bf to < af9bcf910b1f86244f39e15e701b2dc564b469a6affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.9.9 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References