fkie_nvd - fkie_cve-2024-57935

fkie_cve-2024-57935

Vulnerability from fkie_nvd

Published

2025-01-21 12:15

Modified

2025-01-21 12:15

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP If it fails to modify QP to RTR, dip_ctx will not be attached. And during detroying QP, the invalid dip_ctx pointer will be accessed.

References

▶	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/0572eccf239ce4bd89bd531767ec5ab20e249290
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/a448c775f0aec6cfbee4bda561447c707153504a

Impacted products

	Vendor	Product	Version

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/hns: Se solucion\u00f3 el acceso a un dip_ctx no v\u00e1lido durante la destrucci\u00f3n de QP. Si no se puede modificar QP a RTR, no se adjuntar\u00e1 dip_ctx. Y durante la destrucci\u00f3n de QP, se acceder\u00e1 al puntero dip_ctx no v\u00e1lido."
    }
  ],
  "id": "CVE-2024-57935",
  "lastModified": "2025-01-21T12:15:27.153",
  "metrics": {},
  "published": "2025-01-21T12:15:27.153",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/0572eccf239ce4bd89bd531767ec5ab20e249290"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/a448c775f0aec6cfbee4bda561447c707153504a"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

CVE-2024-57935 (GCVE-0-2024-57935)

Vulnerability from cvelistv5

Published

2025-01-21 12:01

Modified

2025-05-04 13:01

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP If it fails to modify QP to RTR, dip_ctx will not be attached. And during detroying QP, the invalid dip_ctx pointer will be accessed.

References

►

URL

Tags

	https://git.kernel.org/stable/c/a448c775f0aec6cfbee4bda561447c707153504a
	https://git.kernel.org/stable/c/0572eccf239ce4bd89bd531767ec5ab20e249290

Impacted products

Vendor

Product

Version

►

Version: f48084857b9e3d73c1d290307b5a11f61e6f666a
Version: faa62440a5772b40bb7d78bf9e29556a82ecf153
Version: 84707ec6f651df98a141cad59f726d30e6f15574

Version: 6.12.2 ≤

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/hw/hns/hns_roce_hw_v2.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a448c775f0aec6cfbee4bda561447c707153504a",
              "status": "affected",
              "version": "f48084857b9e3d73c1d290307b5a11f61e6f666a",
              "versionType": "git"
            },
            {
              "lessThan": "0572eccf239ce4bd89bd531767ec5ab20e249290",
              "status": "affected",
              "version": "faa62440a5772b40bb7d78bf9e29556a82ecf153",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "84707ec6f651df98a141cad59f726d30e6f15574",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/hw/hns/hns_roce_hw_v2.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6.12.9",
              "status": "affected",
              "version": "6.12.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.9",
                  "versionStartIncluding": "6.12.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.11.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T13:01:41.875Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a448c775f0aec6cfbee4bda561447c707153504a"
        },
        {
          "url": "https://git.kernel.org/stable/c/0572eccf239ce4bd89bd531767ec5ab20e249290"
        }
      ],
      "title": "RDMA/hns: Fix accessing invalid dip_ctx during destroying QP",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-57935",
    "datePublished": "2025-01-21T12:01:31.236Z",
    "dateReserved": "2025-01-19T11:50:08.377Z",
    "dateUpdated": "2025-05-04T13:01:41.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.