NetSight
IP …
critical9.8

CVE-2024-47695

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds In the function init_conns(), aft…

Impact

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds In the function init_conns(), after the create_con() and create_cm() for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory because cid is set to clt_path->s.con_num. This commits resets the cid to clt_path->s.con_num - 1, to stay in bounds in the cleanup loop later.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.8 before 5.15.168
from 5.16 before 6.1.113
from 6.2 before 6.6.54
from 6.7 before 6.10.13
from 6.11 before 6.11.2

Weakness classification

CWE-787

References