CVE-2024-40992

RDMA/rxe: Fix responder length checking for UD request packets

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder length checking for UD request packets According to the IBA specification: If a UD request packet is detected with an invalid length, the request shall be an invalid request and it shall be silently dropped by the responder. The responder then waits for a new request packet. commit 689c5421bfe0 ("RDMA/rxe: Fix incorrect responder length checking") defers responder length check for UD QPs in function `copy_data`. But it introduces a regression issue for UD QPs. When the packet size is too large to fit in the receive buffer. `copy_data` will return error code -EINVAL. Then `send_data_in` will return RESPST_ERR_MALFORMED_WQE. UD QP will transfer into ERROR state.

N/A

CVSS

Severity:

EPSS 0.08%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/163868ec1f6c610d16da9e458fe1dd7d5de97341
https://git.kernel.org/stable/c/943c94f41dfe36536dc9aaa12c9efdf548ceb996
https://git.kernel.org/stable/c/f67ac0061c7614c1548963d3ef1ee1606efd8636

Frequently Asked Questions

What is the severity of CVE-2024-40992?: CVE-2024-40992 has not yet been assigned a CVSS score.
How to fix CVE-2024-40992?: To fix CVE-2024-40992, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-40992 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-40992 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-40992?: CVE-2024-40992 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.