AZL-50948
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-50948.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-50948
- Upstream
- Published
- 2024-10-21T13:15:05Z
- Modified
- 2026-04-01T05:17:40.658913Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2024-47750 affecting package kernel for versions less than 6.6.56.1-5
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
Currently rsvqp is freed before ibunregisterdevice() is called on HIP08. During the time interval, users can still dereg MR and rsvqp will be used in this process, leading to a UAF. Move the release of rsvqp after calling ibunregister_device() to fix it.
- References