CVE-2024-57973

rdma/cxgb4: Prevent potential integer overflow on 32bit

State: Published
Severity: 8.1 High
Published: Feb 27, 2025
Updated: Oct 15, 2026
Reserved: Feb 27, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

rdma/cxgb4: Prevent potential integer overflow on 32bit

The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1cab775c3e75f1250c965feafd061d696df36e53 to before 2b759f78b83221f4a1cae3aeb20b500e375f3ee6Affected 1cab775c3e75f1250c965feafd061d696df36e53 to before d64148a10a85952352de6091ceed99fb9ce2d3eeAffected 1cab775c3e75f1250c965feafd061d696df36e53 to before e53ca458f543aa352d09b484550de173cb9085c2Affected 1cab775c3e75f1250c965feafd061d696df36e53 to before 4422f452d028850b9cc4fd8f1cf45a8ff91855ebAffected 1cab775c3e75f1250c965feafd061d696df36e53 to before de8d88b68d0cfd41152a7a63d6aec0ed3e1b837aAffected 1cab775c3e75f1250c965feafd061d696df36e53 to before dd352107f22bfbecbbf3b74bde14f3f932296309Affected 1cab775c3e75f1250c965feafd061d696df36e53 to before aeb814484387811b3579d5c78ad4eb301e3bf1c8Affected 1cab775c3e75f1250c965feafd061d696df36e53 to before bd96a3935e89486304461a21752f824fc25e0f0bAffected
LinuxLinux	3.8Affected before 3.8Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.76 through 6.6.Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

1cab775c3e75f1250c965feafd061d696df36e53 to before 2b759f78b83221f4a1cae3aeb20b500e375f3ee6Affected
1cab775c3e75f1250c965feafd061d696df36e53 to before d64148a10a85952352de6091ceed99fb9ce2d3eeAffected
1cab775c3e75f1250c965feafd061d696df36e53 to before e53ca458f543aa352d09b484550de173cb9085c2Affected
1cab775c3e75f1250c965feafd061d696df36e53 to before 4422f452d028850b9cc4fd8f1cf45a8ff91855ebAffected
1cab775c3e75f1250c965feafd061d696df36e53 to before de8d88b68d0cfd41152a7a63d6aec0ed3e1b837aAffected
1cab775c3e75f1250c965feafd061d696df36e53 to before dd352107f22bfbecbbf3b74bde14f3f932296309Affected
1cab775c3e75f1250c965feafd061d696df36e53 to before aeb814484387811b3579d5c78ad4eb301e3bf1c8Affected
1cab775c3e75f1250c965feafd061d696df36e53 to before bd96a3935e89486304461a21752f824fc25e0f0bAffected

LinuxLinux

3.8Affected
before 3.8Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.76 through 6.6.*Not affected
6.12.13 through 6.12.*Not affected
6.13.2 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.