Riskcovery

CVE-2024-40919

bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()

In case of token is released due to token->state == BNXT_HWRM_DEFERRED, released token (set to NULL) is used in log messages. This issue is expected to be prevented by HWRM_ERR_CODE_PF_UNAVAILABLE error code. But this error code is returned by recent firmware. So some firmware may not return it. This may lead to NULL pointer dereference. Adjust this issue by adding token pointer check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8fa4219dba8e621aa1e78dfa7eeab10f55acb3c0 to before cde177fa235cd36f981012504a6376315bac03c9Affected
  • 8fa4219dba8e621aa1e78dfa7eeab10f55acb3c0 to before ca6660c956242623b4cfe9be2a1abc67907c44bfAffected
  • 8fa4219dba8e621aa1e78dfa7eeab10f55acb3c0 to before 8b65eaeae88d4e9f999e806e196dd887b90bfed9Affected
  • 8fa4219dba8e621aa1e78dfa7eeab10f55acb3c0 to before a9b9741854a9fe9df948af49ca5514e0ed0429dfAffected
LinuxLinux
  • 5.17Affected
  • before 5.17Not affected
  • 6.1.95 through 6.1.*Not affected
  • 6.6.35 through 6.6.*Not affected
  • 6.9.6 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.