CVE-2024-44984

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-44984
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-44984.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-44984
Downstream
Related
Published
2024-09-04T19:54:33Z
Modified
2025-10-17T11:02:58.223209Z
Summary
bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
Details

In the Linux kernel, the following vulnerability has been resolved:

bnxten: Fix double DMA unmapping for XDPREDIRECT

Remove the dmaunmappageattrs() call in the driver's XDPREDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning:

WARNING: CPU: 7 PID: 59 at drivers/iommu/dma-iommu.c:1198 iommudmaunmappage+0xd5/0x100 CPU: 7 PID: 59 Comm: ksoftirqd/7 Tainted: G W 6.8.0-1010-gcp #11-Ubuntu Hardware name: Dell Inc. PowerEdge R7525/0PYVT1, BIOS 2.15.2 04/02/2024 RIP: 0010:iommudmaunmappage+0xd5/0x100 Code: 89 ee 48 89 df e8 cb f2 69 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 31 d2 31 c9 31 f6 31 ff 45 31 c0 e9 ab 17 71 00 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 31 d2 31 c9 RSP: 0018:ffffab1fc0597a48 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff99ff838280c8 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffab1fc0597a78 R08: 0000000000000002 R09: ffffab1fc0597c1c R10: ffffab1fc0597cd3 R11: ffff99ffe375acd8 R12: 00000000e65b9000 R13: 0000000000000050 R14: 0000000000001000 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff9a06efb80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000565c34c37210 CR3: 00000005c7e3e000 CR4: 0000000000350ef0 ? showregs+0x6d/0x80 ? _warn+0x89/0x150 ? iommudmaunmappage+0xd5/0x100 ? reportbug+0x16a/0x190 ? handlebug+0x51/0xa0 ? excinvalidop+0x18/0x80 ? iommudmaunmappage+0xd5/0x100 ? iommudmaunmappage+0x35/0x100 dmaunmappageattrs+0x55/0x220 ? bpfprog4d7e87c0d30db711xdpdispatcher+0x64/0x9f bnxtrxxdp+0x237/0x520 [bnxten] bnxtrxpkt+0x640/0xdd0 [bnxten] _bnxtpollwork+0x1a1/0x3d0 [bnxten] bnxtpoll+0xaa/0x1e0 [bnxten] _napipoll+0x33/0x1e0 netrxaction+0x18a/0x2f0

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
578fcfd26e2a1d0e687b347057959228567e2af8
Fixed
fa4e6ae38574d0fc5596272bee64727d8ab7052b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
578fcfd26e2a1d0e687b347057959228567e2af8
Fixed
95a305ba259b685780ed62ea2295aa2feb2d6c0c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
578fcfd26e2a1d0e687b347057959228567e2af8
Fixed
8baeef7616d5194045c5a6b97fd1246b87c55b13

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.2
v6.10.3
v6.10.4
v6.10.5
v6.10.6
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.5
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "292671234732336449942870812368563097433",
                "28893413636769027236604581941189734561",
                "209516303022543356238923255292844418613",
                "48991570301114502030143126769977630535",
                "312551807414398755479272565430035512922",
                "109996945233719062696230702749945045728",
                "305528675787192419781384007273954598898",
                "333918080164364571846287983519394358417"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@95a305ba259b685780ed62ea2295aa2feb2d6c0c",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "id": "CVE-2024-44984-47a65573",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "292671234732336449942870812368563097433",
                "28893413636769027236604581941189734561",
                "209516303022543356238923255292844418613",
                "48991570301114502030143126769977630535",
                "312551807414398755479272565430035512922",
                "109996945233719062696230702749945045728",
                "305528675787192419781384007273954598898",
                "106393227875652724051789164789505407501"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa4e6ae38574d0fc5596272bee64727d8ab7052b",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "id": "CVE-2024-44984-560749ac",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "length": 2248.0,
            "function_hash": "279427090719666649531481419368869187421"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa4e6ae38574d0fc5596272bee64727d8ab7052b",
        "target": {
            "function": "bnxt_rx_xdp",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "id": "CVE-2024-44984-96a8d99e",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "length": 2264.0,
            "function_hash": "162061287214083549103616128523132983570"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@95a305ba259b685780ed62ea2295aa2feb2d6c0c",
        "target": {
            "function": "bnxt_rx_xdp",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "id": "CVE-2024-44984-abc279e7",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "292671234732336449942870812368563097433",
                "28893413636769027236604581941189734561",
                "209516303022543356238923255292844418613",
                "48991570301114502030143126769977630535",
                "312551807414398755479272565430035512922",
                "109996945233719062696230702749945045728",
                "305528675787192419781384007273954598898",
                "333918080164364571846287983519394358417"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8baeef7616d5194045c5a6b97fd1246b87c55b13",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "id": "CVE-2024-44984-cacbb9e9",
        "signature_version": "v1",
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "digest": {
            "length": 2264.0,
            "function_hash": "162061287214083549103616128523132983570"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8baeef7616d5194045c5a6b97fd1246b87c55b13",
        "target": {
            "function": "bnxt_rx_xdp",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "id": "CVE-2024-44984-f2371ed7",
        "signature_version": "v1",
        "deprecated": false
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.48
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.7