CVE-2024-40919

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the bnxt en component in the Linux kernel, where a NULL pointer dereference may occur in the hwrm send() function when a token is released due to its state being BNXT HWRM DEFERRED. This could lead to a denial of service. The error code HWRM ERR CODE PF UNAVAILABLE is expected to prevent this issue, but it may not be returned by all firmware versions. The problem is resolved by adding a token pointer check.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.