CVE-2024-50208

RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

State: Published
Severity: 7.8 High
Published: Nov 8, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

Avoid memory corruption while setting up Level-2 PBL pages for the non MR resources when num_pages > 256K.

There will be a single PDE page address (contiguous pages in the case of > PAGE_SIZE), but, current logic assumes multiple pages, leading to invalid memory access after 256K PBL entries in the PDE.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
LinuxLinux	0c4dcd602817502bb3dced7a834a13ef717d65a4 to before df6fed0a2a1a5e57f033bca40dc316b18e0d0ce6Affected 0c4dcd602817502bb3dced7a834a13ef717d65a4 to before de5857fa7bcc9a496a914c7e21390be873109f26Affected 0c4dcd602817502bb3dced7a834a13ef717d65a4 to before ea701c1849e7250ea41a4f7493e0a5f136c1d47eAffected 0c4dcd602817502bb3dced7a834a13ef717d65a4 to before 87cb3b0054e53e0155b630bdf8fb714ded62565fAffected 0c4dcd602817502bb3dced7a834a13ef717d65a4 to before daac56dd98e1ba814c878ac0acd482a37f2ab94bAffected 0c4dcd602817502bb3dced7a834a13ef717d65a4 to before 7988bdbbb85ac85a847baf09879edcd0f70521dcAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.229 through 5.10.Not affected 5.15.170 through 5.15.Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

0c4dcd602817502bb3dced7a834a13ef717d65a4 to before df6fed0a2a1a5e57f033bca40dc316b18e0d0ce6Affected
0c4dcd602817502bb3dced7a834a13ef717d65a4 to before de5857fa7bcc9a496a914c7e21390be873109f26Affected
0c4dcd602817502bb3dced7a834a13ef717d65a4 to before ea701c1849e7250ea41a4f7493e0a5f136c1d47eAffected
0c4dcd602817502bb3dced7a834a13ef717d65a4 to before 87cb3b0054e53e0155b630bdf8fb714ded62565fAffected
0c4dcd602817502bb3dced7a834a13ef717d65a4 to before daac56dd98e1ba814c878ac0acd482a37f2ab94bAffected
0c4dcd602817502bb3dced7a834a13ef717d65a4 to before 7988bdbbb85ac85a847baf09879edcd0f70521dcAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.229 through 5.10.*Not affected
5.15.170 through 5.15.*Not affected
6.1.115 through 6.1.*Not affected
6.6.59 through 6.6.*Not affected
6.11.6 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.