In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
If it fails to modify QP to RTR, dipctx will not be attached. And during detroying QP, the invalid dipctx pointer will be accessed.
[ { "id": "CVE-2024-57935-0033448a", "deprecated": false, "signature_version": "v1", "target": { "function": "put_dip_ctx_idx", "file": "drivers/infiniband/hw/hns/hns_roce_hw_v2.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a448c775f0aec6cfbee4bda561447c707153504a", "digest": { "function_hash": "85003680064195309525818509614272579565", "length": 262.0 }, "signature_type": "Function" }, { "id": "CVE-2024-57935-3be8ad59", "deprecated": false, "signature_version": "v1", "target": { "function": "put_dip_ctx_idx", "file": "drivers/infiniband/hw/hns/hns_roce_hw_v2.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0572eccf239ce4bd89bd531767ec5ab20e249290", "digest": { "function_hash": "85003680064195309525818509614272579565", "length": 262.0 }, "signature_type": "Function" }, { "id": "CVE-2024-57935-809aaee3", "deprecated": false, "signature_version": "v1", "target": { "file": "drivers/infiniband/hw/hns/hns_roce_hw_v2.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a448c775f0aec6cfbee4bda561447c707153504a", "digest": { "threshold": 0.9, "line_hashes": [ "32269418080778058001163224149337349209", "268074318256927397437184266821381212206", "192545447488573018768256263809885959787" ] }, "signature_type": "Line" }, { "id": "CVE-2024-57935-993a01fc", "deprecated": false, "signature_version": "v1", "target": { "file": "drivers/infiniband/hw/hns/hns_roce_hw_v2.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0572eccf239ce4bd89bd531767ec5ab20e249290", "digest": { "threshold": 0.9, "line_hashes": [ "32269418080778058001163224149337349209", "268074318256927397437184266821381212206", "192545447488573018768256263809885959787" ] }, "signature_type": "Line" } ]