CVE-2024-50158

RDMA/bnxt_re: Fix out of bound check

State: Published
Severity: 7.8 High
Published: Nov 7, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Fix out of bound check

Driver exports pacing stats only on GenP5 and P7 adapters. But while parsing the pacing stats, driver has a check for "rdev->dbr_pacing". This caused a trace when KASAN is enabled.

BUG: KASAN: slab-out-of-bounds in bnxt_re_get_hw_stats+0x2b6a/0x2e00 [bnxt_re] Write of size 8 at addr ffff8885942a6340 by task modprobe/4809

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	8b6573ff3420a2da1deb469a480dbc454745f784 to before 05c5fcc1869a08e36a29691699b6534e5a00a82bAffected 8b6573ff3420a2da1deb469a480dbc454745f784 to before c11b9b03ea5252898f91f3388c248f0dc47bda52Affected 8b6573ff3420a2da1deb469a480dbc454745f784 to before a9e6e7443922ac0a48243c35d03834c96926bff1Affected
LinuxLinux	6.6Affected before 6.6Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.