PT-2024-7307 · Linux+6 · Linux Kernel+6
Mats Kronberg
·
Published
2024-02-04
·
Updated
2026-02-02
·
CVE-2024-26766
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
The vulnerability is related to an off-by-one error in the IB/hfi1 component of the Linux kernel, which can cause the
descs array to overflow. This results in crashes that can be easily reproduced by the sendmsg system call. The issue is caused by an incorrect commit that introduced another error, leading to further crashes. The fix involves using the correct expression in pad sdma tx descs() to test the need to expand the descriptor array.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Rocky Linux
Suse
Ubuntu