What’s Vulnerable › Vulnerabilities

CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-19 · updated 2026-08-04
• Weakness: CWE-129

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: boundary check before installing cq callbacks Add a boundary check inside mana_ib_install_cq_cb to prevent index overflow.

Affected products

• Linux kernel: from 6.8.2 before 6.8.12; from 6.9 before 6.9.3 — fixed in 6.8.12, 6.9.3

How to fix

Upgrade to a fixed version: Linux kernel 6.8.12, 6.9.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977
• https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8
• https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74
• https://git.kernel.org/stable/c/168f6fbde0eabd71d1f4133df7d001a950b96977
• https://git.kernel.org/stable/c/f12afddfb142587d786df9e3cc4862190d3e2ec8
• https://git.kernel.org/stable/c/f79edef79b6a2161f4124112f9b0c46891bb0b74

Get alerted when CVE-2024-38542 or the next vulnerability affects your stack