SecuriTricks - CVE-2024-47750

Product(s) Impacted

Linux kernel

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is freed before ib_unregister_device() is called on HIP08. During the time interval, users can still dereg MR and rsv_qp will be used in this process, leading to a UAF. Move the release of rsv_qp after calling ib_unregister_device() to fix it.

Weaknesses

Date

Published: Oct. 21, 2024, 1:15 p.m.

Last Modified: Oct. 21, 2024, 5:09 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

References

CVE-2024-47750

Tags