CVE-2024-38544

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38544
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whether to run the completer task inline or schedule it. Finally the skb is dereferenced to bump a 'hw' performance counter. This is wrong because if the completer task is already running in a separate thread it may have already processed the skb and freed it which can cause a seg fault. This has been observed infrequently in testing at high scale. This patch fixes this by changing the order of enqueuing the packet until after the counter is accessed.

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/21b4c6d4d89030fd4657a8e7c8110fd941049794 Patch
https://git.kernel.org/stable/c/2b23b6097303ed0ba5f4bc036a1c07b6027af5c6 Patch
https://git.kernel.org/stable/c/30df4bef8b8e183333e9b6e9d4509d552c7da6eb Patch
https://git.kernel.org/stable/c/bbad88f111a1829f366c189aa48e7e58e57553fc Patch
https://git.kernel.org/stable/c/c91fb72a2ca6480d8d77262eef52dc5b178463a3 Patch
https://git.kernel.org/stable/c/de5a059e36657442b5637cc16df5163e435b9cb4 Patch
https://git.kernel.org/stable/c/e0e14dd35d4242340c7346aac60c7ff8fbf87ffc Patch
https://git.kernel.org/stable/c/faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19 Patch
https://git.kernel.org/stable/c/21b4c6d4d89030fd4657a8e7c8110fd941049794 Patch
https://git.kernel.org/stable/c/2b23b6097303ed0ba5f4bc036a1c07b6027af5c6 Patch
https://git.kernel.org/stable/c/30df4bef8b8e183333e9b6e9d4509d552c7da6eb Patch
https://git.kernel.org/stable/c/bbad88f111a1829f366c189aa48e7e58e57553fc Patch
https://git.kernel.org/stable/c/faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

20 Oct 2025, 21:50

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-416
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/21b4c6d4d89030fd4657a8e7c8110fd941049794 - () https://git.kernel.org/stable/c/21b4c6d4d89030fd4657a8e7c8110fd941049794 - Patch
References () https://git.kernel.org/stable/c/2b23b6097303ed0ba5f4bc036a1c07b6027af5c6 - () https://git.kernel.org/stable/c/2b23b6097303ed0ba5f4bc036a1c07b6027af5c6 - Patch
References () https://git.kernel.org/stable/c/30df4bef8b8e183333e9b6e9d4509d552c7da6eb - () https://git.kernel.org/stable/c/30df4bef8b8e183333e9b6e9d4509d552c7da6eb - Patch
References () https://git.kernel.org/stable/c/bbad88f111a1829f366c189aa48e7e58e57553fc - () https://git.kernel.org/stable/c/bbad88f111a1829f366c189aa48e7e58e57553fc - Patch
References () https://git.kernel.org/stable/c/c91fb72a2ca6480d8d77262eef52dc5b178463a3 - () https://git.kernel.org/stable/c/c91fb72a2ca6480d8d77262eef52dc5b178463a3 - Patch
References () https://git.kernel.org/stable/c/de5a059e36657442b5637cc16df5163e435b9cb4 - () https://git.kernel.org/stable/c/de5a059e36657442b5637cc16df5163e435b9cb4 - Patch
References () https://git.kernel.org/stable/c/e0e14dd35d4242340c7346aac60c7ff8fbf87ffc - () https://git.kernel.org/stable/c/e0e14dd35d4242340c7346aac60c7ff8fbf87ffc - Patch
References () https://git.kernel.org/stable/c/faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19 - () https://git.kernel.org/stable/c/faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19 - Patch

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/21b4c6d4d89030fd4657a8e7c8110fd941049794 - () https://git.kernel.org/stable/c/21b4c6d4d89030fd4657a8e7c8110fd941049794 -
References () https://git.kernel.org/stable/c/2b23b6097303ed0ba5f4bc036a1c07b6027af5c6 - () https://git.kernel.org/stable/c/2b23b6097303ed0ba5f4bc036a1c07b6027af5c6 -
References () https://git.kernel.org/stable/c/30df4bef8b8e183333e9b6e9d4509d552c7da6eb - () https://git.kernel.org/stable/c/30df4bef8b8e183333e9b6e9d4509d552c7da6eb -
References () https://git.kernel.org/stable/c/bbad88f111a1829f366c189aa48e7e58e57553fc - () https://git.kernel.org/stable/c/bbad88f111a1829f366c189aa48e7e58e57553fc -
References () https://git.kernel.org/stable/c/faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19 - () https://git.kernel.org/stable/c/faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19 -

08 Nov 2024, 16:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/c91fb72a2ca6480d8d77262eef52dc5b178463a3 -

06 Nov 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.3

17 Oct 2024, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/de5a059e36657442b5637cc16df5163e435b9cb4 -
  • () https://git.kernel.org/stable/c/e0e14dd35d4242340c7346aac60c7ff8fbf87ffc -

20 Jun 2024, 12:44

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: RDMA/rxe: corrige la falla de segmentación en rxe_comp_queue_pkt En rxe_comp_queue_pkt(), un paquete de respuesta entrante skb se pone en cola en la cola resp_pkts y luego se toma una decisión si se ejecuta la tarea de finalización en línea o programarla. Finalmente, se elimina la referencia al skb para aumentar un contador de rendimiento 'hw'. Esto es incorrecto porque si la tarea de finalización ya se está ejecutando en un hilo separado, es posible que ya haya procesado el skb y lo haya liberado, lo que puede causar una falla de segmentación. Esto se ha observado con poca frecuencia en pruebas a gran escala. Este parche soluciona este problema cambiando el orden de poner en cola el paquete hasta que se accede al contador.

19 Jun 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-19 14:15

Updated : 2025-10-20 21:50

NVD link : CVE-2024-38544

Mitre link : CVE-2024-38544

CVE.ORG link : CVE-2024-38544

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free