CVE-2024-26744: RDMA/srpt: Support specifying the srpt_service_guid parameter
In the Linux kernel, the following vulnerability has been resolved:
RDMA/srpt: Support specifying the srptserviceguid parameter
Make loading ibsrpt with this parameter set work. The current behavior is that setting that parameter while loading the ibsrpt kernel module triggers the following kernel crash:
BUG: kernel NULL pointer dereference, address: 0000000000000000 Call Trace: parseone+0x18c/0x1d0 parseargs+0xe1/0x230 loadmodule+0x8de/0xa60 initmodulefromfile+0x8b/0xd0 idempotentinitmodule+0x181/0x240 x64sysfinitmodule+0x5a/0xb0 dosyscall64+0x5f/0xe0 entrySYSCALL64afterhwframe+0x6e/0x76
Other sources
In the Linux kernel, the following vulnerability has been resolved:
RDMA/srpt: Support specifying the srptserviceguid parameter
Make loading ibsrpt with this parameter set work. The current behavior is that setting that parameter while loading the ibsrpt kernel module triggers the following kernel crash:
BUG: kernel NULL pointer dereference, address: 0000000000000000 Call Trace: <TASK> parseone+0x18c/0x1d0 parseargs+0xe1/0x230 loadmodule+0x8de/0xa60 initmodulefromfile+0x8b/0xd0 idempotentinitmodule+0x181/0x240 x64sysfinitmodule+0x5a/0xb0 dosyscall64+0x5f/0xe0 entrySYSCALL64afterhwframe+0x6e/0x76
— NVD
In the Linux kernel, the following vulnerability has been resolved:
RDMA/srpt: Support specifying the srptserviceguid parameter
The Linux kernel CVE team has assigned CVE-2024-26744 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024040301-CVE-2024-26744-d344@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26744?
CVE-2024-26744 is classified as a low severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26744?
To fix CVE-2024-26744, upgrade to kernel versions 4.19.308, 5.10.211, 5.15.150, 6.1.80, 6.6.19, 6.7.7, 6.8, or specific Debian kernel versions that have addressed this vulnerability.
What software is affected by CVE-2024-26744?
CVE-2024-26744 affects several kernel versions from Red Hat and Debian packages.
What does CVE-2024-26744 address?
CVE-2024-26744 addresses an issue with the RDMA/srpt that prevents proper loading of the ib_srpt kernel module with the srpt_service_guid parameter.
When was CVE-2024-26744 disclosed?
The disclosure date for CVE-2024-26744 is not explicitly provided, but it was resolved in recent kernel updates.