PT-2024-7307
CVE-2024-26766
·
تاريخ النشر
2024-02-04
·
تاريخ التحديث
2026-02-02
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The vulnerability is related to an off-by-one error in the IB/hfi1 component of the Linux kernel, which can cause the
descs array to overflow. This results in crashes that can be easily reproduced by the sendmsg system call. The issue is caused by an incorrect commit that introduced another error, leading to further crashes. The fix involves using the correct expression in pad sdma tx descs() to test the need to expand the descriptor array.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾