PT-2024-33883 · Linux+4 · Linux Kernel+4
Jacob Keller
·
Published
2024-10-08
·
Updated
2025-09-29
·
CVE-2024-50042
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The issue is caused by not reallocating some arrays when increasing the MSI-X value on a VF, leading to invalid memory operations. The default MSI-X is 16, and values of 17 and above trigger this issue. The problem can be reproduced by running specific commands, including modprobe ice, and setting certain values in the sys/bus/pci/devices directory. KASAN reports a slab-out-of-bounds error in the ice vsi alloc ring stats function.
Recommendations:
To fix the issue, use ice vsi rebuild() instead of ice vf reconfig vsi(). This causes the required arrays to be reallocated, taking the new queue count into account. Set req txq and req rxq before ice vsi rebuild(), so that realloc uses the newly set queue count. Additionally, ice vsi rebuild() does not remove VSI filters, so ice vf init host cfg() is no longer necessary.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Suse
Ubuntu