CVE-2024-26872

RDMA/srpt: Do not register event handler until srpt device is fully setup

State: Published
Severity: 7.8 High
Published: Apr 17, 2024
Updated: Oct 15, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/srpt: Do not register event handler until srpt device is fully setup

Upon rare occasions, KASAN reports a use-after-free Write in srpt_refresh_port().

This seems to be because an event handler is registered before the srpt device is fully setup and a race condition upon error may leave a partially setup event handler in place.

Instead, only register the event handler after srpt device initialization is complete.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a42d985bd5b234da8b61347a78dc3057bf7bb94d to before bdd895e0190c464f54f84579e7535d80276f0fc5Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 6413e78086caf7bf15639923740da0d91fdfd090Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before e362d007294955a4fb929e1c8978154a64efdcb6Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 85570b91e4820a0db9d9432098778cafafa7d217Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 7104a00fa37ae898a827381f1161fa3286c8b346Affected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before ec77fa12da41260c6bf9e060b89234b980c5130fAffected a42d985bd5b234da8b61347a78dc3057bf7bb94d to before c21a8870c98611e8f892511825c9607f1e2cd456Affected
LinuxLinux	3.3Affected before 3.3Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

a42d985bd5b234da8b61347a78dc3057bf7bb94d to before bdd895e0190c464f54f84579e7535d80276f0fc5Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 6413e78086caf7bf15639923740da0d91fdfd090Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before e362d007294955a4fb929e1c8978154a64efdcb6Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 85570b91e4820a0db9d9432098778cafafa7d217Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before 7104a00fa37ae898a827381f1161fa3286c8b346Affected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before ec77fa12da41260c6bf9e060b89234b980c5130fAffected
a42d985bd5b234da8b61347a78dc3057bf7bb94d to before c21a8870c98611e8f892511825c9607f1e2cd456Affected

LinuxLinux

3.3Affected
before 3.3Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.