CVE-2024-26744

RDMA/srpt: Support specifying the srpt_service_guid parameter

State: Published
Severity: 5.5 Medium
Published: Apr 3, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/srpt: Support specifying the srpt_service_guid parameter

Make loading ib_srpt with this parameter set work. The current behavior is that setting that parameter while loading the ib_srpt kernel module triggers the following kernel crash:

BUG: kernel NULL pointer dereference, address: 0000000000000000 Call Trace: <TASK> parse_one+0x18c/0x1d0 parse_args+0xe1/0x230 load_module+0x8de/0xa60 init_module_from_file+0x8b/0xd0 idempotent_init_module+0x181/0x240 __x64_sys_finit_module+0x5a/0xb0 do_syscall_64+0x5f/0xe0 entry_SYSCALL_64_after_hwframe+0x6e/0x76

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 84f1dac960cfa210a3b7a7522e6c2320ae91932bAffected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before e0055d6461b36bfc25a9d2ab974eef78d36a6738Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 5a5c039dac1b1b7ba3e91c791f4421052bf79b82Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 989af2f29342a9a7c7515523d879b698ac8465f4Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before aee4dcfe17219fe60f2821923adea98549060af8Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before fe2a73d57319feab4b3b175945671ce43492172fAffected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before c99a827d3cff9f84e1cb997b7cc6386d107aa74dAffected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before fdfa083549de5d50ebf7f6811f33757781e838c0Affected
LinuxLinux	3.3Affected before 3.3Not affected 4.19.308 through 4.19.Not affected 5.4.293 through 5.4.Not affected 5.10.211 through 5.10.Not affected 5.15.150 through 5.15.Not affected 6.1.80 through 6.1.Not affected 6.6.19 through 6.6.Not affected 6.7.7 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 84f1dac960cfa210a3b7a7522e6c2320ae91932bAffected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before e0055d6461b36bfc25a9d2ab974eef78d36a6738Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 5a5c039dac1b1b7ba3e91c791f4421052bf79b82Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 989af2f29342a9a7c7515523d879b698ac8465f4Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before aee4dcfe17219fe60f2821923adea98549060af8Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before fe2a73d57319feab4b3b175945671ce43492172fAffected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before c99a827d3cff9f84e1cb997b7cc6386d107aa74dAffected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before fdfa083549de5d50ebf7f6811f33757781e838c0Affected

LinuxLinux

3.3Affected
before 3.3Not affected
4.19.308 through 4.19.*Not affected
5.4.293 through 5.4.*Not affected
5.10.211 through 5.10.*Not affected
5.15.150 through 5.15.*Not affected
6.1.80 through 6.1.*Not affected
6.6.19 through 6.6.*Not affected
6.7.7 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.