CVE-2024-47749

RDMA/cxgb4: Added NULL check for lookup_atid

State: Published
Severity: 7.5 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cxgb4: Added NULL check for lookup_atid

The lookup_atid() function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the `act_establish()` and `act_open_rpl()` functions. Add a NULL check to prevent null pointer dereferencing.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cfdda9d764362ab77b11a410bb928400e6520d57 to before b12e25d91c7f97958341538c7dc63ee49d01548fAffected cfdda9d764362ab77b11a410bb928400e6520d57 to before 4e1fe68d695af367506ea3c794c5969630f21697Affected cfdda9d764362ab77b11a410bb928400e6520d57 to before dd598ac57dcae796cb58551074660c39b43fb155Affected cfdda9d764362ab77b11a410bb928400e6520d57 to before b11318dc8a1ec565300bb1a9073095af817cc508Affected cfdda9d764362ab77b11a410bb928400e6520d57 to before 39cb9f39913566ec5865581135f3e8123ad1aee1Affected cfdda9d764362ab77b11a410bb928400e6520d57 to before 0d50ae281a1712b9b2ca72830a96b8f11882358dAffected cfdda9d764362ab77b11a410bb928400e6520d57 to before 54aaa3ed40972511e423b604324b881425b9ff1eAffected cfdda9d764362ab77b11a410bb928400e6520d57 to before b9c94c8ba5a713817cffd74c4bacc05187469624Affected cfdda9d764362ab77b11a410bb928400e6520d57 to before e766e6a92410ca269161de059fff0843b8ddd65fAffected
LinuxLinux	2.6.35Affected before 2.6.35Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.54 through 6.6.Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

cfdda9d764362ab77b11a410bb928400e6520d57 to before b12e25d91c7f97958341538c7dc63ee49d01548fAffected
cfdda9d764362ab77b11a410bb928400e6520d57 to before 4e1fe68d695af367506ea3c794c5969630f21697Affected
cfdda9d764362ab77b11a410bb928400e6520d57 to before dd598ac57dcae796cb58551074660c39b43fb155Affected
cfdda9d764362ab77b11a410bb928400e6520d57 to before b11318dc8a1ec565300bb1a9073095af817cc508Affected
cfdda9d764362ab77b11a410bb928400e6520d57 to before 39cb9f39913566ec5865581135f3e8123ad1aee1Affected
cfdda9d764362ab77b11a410bb928400e6520d57 to before 0d50ae281a1712b9b2ca72830a96b8f11882358dAffected
cfdda9d764362ab77b11a410bb928400e6520d57 to before 54aaa3ed40972511e423b604324b881425b9ff1eAffected
cfdda9d764362ab77b11a410bb928400e6520d57 to before b9c94c8ba5a713817cffd74c4bacc05187469624Affected
cfdda9d764362ab77b11a410bb928400e6520d57 to before e766e6a92410ca269161de059fff0843b8ddd65fAffected

LinuxLinux

2.6.35Affected
before 2.6.35Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.54 through 6.6.*Not affected
6.10.13 through 6.10.*Not affected
6.11.2 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.