CVE-2024-57936

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57936
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causing traffic failures and system crashes. Use the define for max SGE supported for variable size. This will work for both static and variable WQEs.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3de1b50f055dc2ca7072a526cdda21f691c22dd9 Patch
https://git.kernel.org/stable/c/79d330fbdffd8cee06d8bdf38d82cb62d8363a27 Patch
https://git.kernel.org/stable/c/9a479088e0c8f6140b8c7752b563bc8c6c6dcc8c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
History

15 Oct 2025, 13:50

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/3de1b50f055dc2ca7072a526cdda21f691c22dd9 - () https://git.kernel.org/stable/c/3de1b50f055dc2ca7072a526cdda21f691c22dd9 - Patch
References () https://git.kernel.org/stable/c/79d330fbdffd8cee06d8bdf38d82cb62d8363a27 - () https://git.kernel.org/stable/c/79d330fbdffd8cee06d8bdf38d82cb62d8363a27 - Patch
References () https://git.kernel.org/stable/c/9a479088e0c8f6140b8c7752b563bc8c6c6dcc8c - () https://git.kernel.org/stable/c/9a479088e0c8f6140b8c7752b563bc8c6c6dcc8c - Patch
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/bnxt_re: Se corrige el número máximo de SGE para la solicitud de trabajo. La generación P7 admite hasta 13 SGE por ahora. La estructura de software de WQE solo puede admitir 6 ahora. Dado que el número máximo de SGE de envío se informa como 13, la pila puede dar solicitudes de hasta 13 SGE. Esto está causando fallas de tráfico y bloqueos del sistema. Utilice la definición para el número máximo de SGE admitidos para el tamaño variable. Esto funcionará tanto para WQE estáticos como variables.
CWE NVD-CWE-noinfo

21 Jan 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-21 12:15

Updated : 2025-10-15 13:50

NVD link : CVE-2024-57936

Mitre link : CVE-2024-57936

CVE.ORG link : CVE-2024-57936

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo