CVE - CVE-2024-42285

CVE-ID
CVE-2024-42285	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler; rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/557d035fe88d78dd51664f4dc0e1896c04c97cf6 URL:https://git.kernel.org/stable/c/557d035fe88d78dd51664f4dc0e1896c04c97cf6 MISC:https://git.kernel.org/stable/c/7f25f296fc9bd0435be14e89bf657cd615a23574 URL:https://git.kernel.org/stable/c/7f25f296fc9bd0435be14e89bf657cd615a23574 MISC:https://git.kernel.org/stable/c/94ee7ff99b87435ec63211f632918dc7f44dac79 URL:https://git.kernel.org/stable/c/94ee7ff99b87435ec63211f632918dc7f44dac79 MISC:https://git.kernel.org/stable/c/aee2424246f9f1dadc33faa78990c1e2eb7826e4 URL:https://git.kernel.org/stable/c/aee2424246f9f1dadc33faa78990c1e2eb7826e4 MISC:https://git.kernel.org/stable/c/d91d253c87fd1efece521ff2612078a35af673c6 URL:https://git.kernel.org/stable/c/d91d253c87fd1efece521ff2612078a35af673c6 MISC:https://git.kernel.org/stable/c/dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 URL:https://git.kernel.org/stable/c/dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 MISC:https://git.kernel.org/stable/c/ee39384ee787e86e9db4efb843818ef0ea9cb8ae URL:https://git.kernel.org/stable/c/ee39384ee787e86e9db4efb843818ef0ea9cb8ae MISC:https://git.kernel.org/stable/c/ff5bbbdee08287d75d72e65b72a2b76d9637892a URL:https://git.kernel.org/stable/c/ff5bbbdee08287d75d72e65b72a2b76d9637892a
Assigning CNA
kernel.org
Date Record Created
20240730	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240730)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)