Bug 2320196 (CVE-2024-47749) - CVE-2024-47749 kernel: RDMA/cxgb4: Added NULL check for lookup_atid
Summary: CVE-2024-47749 kernel: RDMA/cxgb4: Added NULL check for lookup_atid
Keywords:
Status: NEW
Alias: CVE-2024-47749
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2320348
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-10-21 13:01 UTC by OSIDB Bzimport
Modified: 2024-10-22 11:52 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-10-21 13:01:19 UTC
In the Linux kernel, the following vulnerability has been resolved:

RDMA/cxgb4: Added NULL check for lookup_atid

The lookup_atid() function can return NULL if the ATID is
invalid or does not exist in the identifier table, which
could lead to dereferencing a null pointer without a
check in the `act_establish()` and `act_open_rpl()` functions.
Add a NULL check to prevent null pointer dereferencing.

Found by Linux Verification Center (linuxtesting.org) with SVACE.


Note You need to log in before you can comment on or make changes to this bug.