CVE-2024-38545

HIGH

Linux Kernel 4.9-6.9.2 - Use-After-Free in RDMA/hns CQ Async Event Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ asynchronous events and CQ destruction are concurrent, CQ may have been released, which will cause UAF. Use the xa_lock() to protect the CQ refcount.

References (6)

Core 6

Scores

CVSS v3 7.8
EPSS 0.0025
EPSS Percentile 16.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (20)
linux/Kernel 4.9.0 - 5.15.168linux
linux/Kernel 5.16.0 - 6.1.93linux
linux/Kernel 6.2.0 - 6.6.33linux
linux/Kernel 6.7.0 - 6.8.12linux
linux/Kernel 6.9.0 - 6.9.3linux
Linux/Linux < 4.9
Linux/Linux 4.9
Linux/Linux 5.15.168 - 5.15.*
Linux/Linux 6.1.93 - 6.1.*
Linux/Linux 6.10
... and 10 more
Published Jun 19, 2024
Tracked Since Feb 18, 2026