CVE - CVE-2024-47695

CVE-ID
CVE-2024-47695	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds In the function init_conns(), after the create_con() and create_cm() for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory because cid is set to clt_path->s.con_num. This commits resets the cid to clt_path->s.con_num - 1, to stay in bounds in the cleanup loop later.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/01b9be936ee8839ab9f83a7e84ee02ac6c8303c4 URL:https://git.kernel.org/stable/c/01b9be936ee8839ab9f83a7e84ee02ac6c8303c4 MISC:https://git.kernel.org/stable/c/0429a4e972082e3a2351da414b1c017daaf8aed2 URL:https://git.kernel.org/stable/c/0429a4e972082e3a2351da414b1c017daaf8aed2 MISC:https://git.kernel.org/stable/c/1c50e0265fa332c94a4a182e4efa0fc70d8fad94 URL:https://git.kernel.org/stable/c/1c50e0265fa332c94a4a182e4efa0fc70d8fad94 MISC:https://git.kernel.org/stable/c/3e4289b29e216a55d08a89e126bc0b37cbad9f38 URL:https://git.kernel.org/stable/c/3e4289b29e216a55d08a89e126bc0b37cbad9f38 MISC:https://git.kernel.org/stable/c/5ac73f8191f3de41fef4f934d84d97f3aadb301f URL:https://git.kernel.org/stable/c/5ac73f8191f3de41fef4f934d84d97f3aadb301f MISC:https://git.kernel.org/stable/c/c8b7f3d9fada0d4b4b7db86bf7345cd61f1d972e URL:https://git.kernel.org/stable/c/c8b7f3d9fada0d4b4b7db86bf7345cd61f1d972e
Assigning CNA
kernel.org
Date Record Created
20240930	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240930)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)