CVE-2024-41079

MEDIUM

Linux Kernel - Information Disclosure via Uninitialized NVMe Command Queue Entry Result

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: nvmet: always initialize cqe.result The spec doesn't mandate that the first two double words (aka results) for the command queue entry need to be set to 0 when they are not used (not specified). Though, the target implemention returns 0 for TCP and FC but not for RDMA. Let's make RDMA behave the same and thus explicitly initializing the result field. This prevents leaking any data from the stack.

References (6)

Core 6

Scores

CVSS v3 5.5
EPSS 0.0026
EPSS Percentile 17.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (19)
linux/Kernel 4.8.0 - 5.15.209linux
linux/Kernel 4.8.0 - 6.1.101linux
linux/Kernel 5.16.0 - 6.1.101linux
linux/Kernel 6.2.0 - 6.6.42linux
linux/Kernel 6.7.0 - 6.9.11linux
Linux/Linux < 4.8
Linux/Linux 4.8
Linux/Linux 5.15.209 - 5.15.*
Linux/Linux 6.1.101 - 6.1.*
Linux/Linux 6.10
... and 9 more
Published Jul 29, 2024
Tracked Since Feb 18, 2026