CVE-2024-40999

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40999
In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that `first` flag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a reset will occur. A new reset reason for RX data corruption has been added.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e Patch
https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7 Patch
https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e Patch
https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

07 Oct 2025, 20:07

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e - () https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e - Patch
References () https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7 - () https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7 - Patch

21 Nov 2024, 09:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e - () https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e -
References () https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7 - () https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: net: ena: agregue validación para la coherencia de los descriptores de finalización. Valide que el indicador "primer" esté configurado solo para el primer descriptor en paquetes de múltiples búfer. En caso de un descriptor no válido, se producirá un reinicio. Se ha agregado un nuevo motivo de reinicio para la corrupción de datos RX.

12 Jul 2024, 16:34

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-12 13:15

Updated : 2025-10-07 20:07

NVD link : CVE-2024-40999

Mitre link : CVE-2024-40999

CVE.ORG link : CVE-2024-40999

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo