CVE - CVE-2024-40992

CVE-ID
CVE-2024-40992	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder length checking for UD request packets According to the IBA specification: If a UD request packet is detected with an invalid length, the request shall be an invalid request and it shall be silently dropped by the responder. The responder then waits for a new request packet. commit 689c5421bfe0 ("RDMA/rxe: Fix incorrect responder length checking") defers responder length check for UD QPs in function `copy_data`. But it introduces a regression issue for UD QPs. When the packet size is too large to fit in the receive buffer. `copy_data` will return error code -EINVAL. Then `send_data_in` will return RESPST_ERR_MALFORMED_WQE. UD QP will transfer into ERROR state.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/163868ec1f6c610d16da9e458fe1dd7d5de97341 URL:https://git.kernel.org/stable/c/163868ec1f6c610d16da9e458fe1dd7d5de97341 MISC:https://git.kernel.org/stable/c/943c94f41dfe36536dc9aaa12c9efdf548ceb996 URL:https://git.kernel.org/stable/c/943c94f41dfe36536dc9aaa12c9efdf548ceb996 MISC:https://git.kernel.org/stable/c/f67ac0061c7614c1548963d3ef1ee1606efd8636 URL:https://git.kernel.org/stable/c/f67ac0061c7614c1548963d3ef1ee1606efd8636
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)