NetSight
IP …
high7.8

CVE-2024-50208

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while se…

Impact

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K. There will be a single PDE page address (contiguous pages in the case of > PAGE_SIZE), but, current logic assumes multiple pages, leading to invalid memory access after 256K PBL entries in the PDE.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.7 before 5.10.229
from 5.11 before 5.15.170
from 5.16 before 6.1.115
from 6.2 before 6.6.59
from 6.7 before 6.11.6
Version 6.12

Weakness classification

CWE-125

References