What’s Vulnerable › Vulnerabilities

CVE-2024-42162: gve: Account for stopped queues when reading NIC stats

• Severity: high (CVSS 7.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-30 · updated 2026-10-21
• Weakness: CWE-754

Description

In the Linux kernel, the following vulnerability has been resolved: gve: Account for stopped queues when reading NIC stats We now account for the fact that the NIC might send us stats for a subset of queues. Without this change, gve_get_ethtool_stats might make an invalid access on the priv->stats_report->stats array.

Affected products

• Linux kernel: from 5.3 through 6.9.9

References

• https://git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62
• https://git.kernel.org/stable/c/acf609843a848e2c22ccce98eef109330403380d
• https://git.kernel.org/stable/c/af9bcf910b1f86244f39e15e701b2dc564b469a6
• https://git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62
• https://git.kernel.org/stable/c/af9bcf910b1f86244f39e15e701b2dc564b469a6

Get alerted when CVE-2024-42162 or the next vulnerability affects your stack