CVE-2024-57935

MEDIUM

Linux Kernel 6.11.11-6.12 - Use-After-Free in RDMA/hns QP Destruction

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix accessing invalid dip_ctx during destroying QP If it fails to modify QP to RTR, dip_ctx will not be attached. And during detroying QP, the invalid dip_ctx pointer will be accessed.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/a448c775f0aec6cfbee4bda561447c707153504a

Patch

https://git.kernel.org/stable/c/0572eccf239ce4bd89bd531767ec5ab20e249290

Scores

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 6.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (8)

linux/Kernel 6.12.2 - 6.12.9linux

Linux/Linux 6.11.11 - 6.12

Linux/Linux 6.12.2 - 6.12.9

Linux/Linux 84707ec6f651df98a141cad59f726d30e6f15574

Linux/Linux f48084857b9e3d73c1d290307b5a11f61e6f666a - a448c775f0aec6cfbee4bda561447c707153504a

Linux/Linux faa62440a5772b40bb7d78bf9e29556a82ecf153 - 0572eccf239ce4bd89bd531767ec5ab20e249290

linux/linux_kernel 6.13 rc1 (5 CPE variants)

linux/linux_kernel 6.11.11 - 6.12

Published Jan 21, 2025

Tracked Since Feb 18, 2026