In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Add check for srq max_sge attribute
max_sge attribute is passed by the user, and is inserted and used unchecked, so verify that the value doesn't exceed maximum allowed value before using it.
{ "vanir_signatures": [ { "signature_type": "Function", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c", "function": "mlx5_ib_create_srq" }, "signature_version": "v1", "digest": { "length": 3124.0, "function_hash": "40338112880079250275568429197372308975" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999586418600b4b3b93c2a0edd3a4ca71ee759bf", "deprecated": false, "id": "CVE-2024-40990-0a3fc1dd" }, { "signature_type": "Function", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c", "function": "mlx5_ib_create_srq" }, "signature_version": "v1", "digest": { "length": 3124.0, "function_hash": "40338112880079250275568429197372308975" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0deb0e9c967b61420235f7f17a4450b4b4d6ce2", "deprecated": false, "id": "CVE-2024-40990-2f55de96" }, { "signature_type": "Line", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "334927236549769353150175906461618544216", "68278392652263862574546542904398891665", "259430974937903185524439658724629614516", "226299020026595965885490872679159089333", "136243526875568706259437521868788384359", "196765076116764309949999154593472395278", "245065259905275897350031582558545476142", "304073252028223189554000667596628545837", "213294911071028053896449478972650860539", "306125521526684760488987649706670629274", "78739869430645613256740900614940378844", "266250361117556481177055023472100990848" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ab99e3613139f026d2d8ba954819e2876120ab3", "deprecated": false, "id": "CVE-2024-40990-3e506fec" }, { "signature_type": "Function", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c", "function": "mlx5_ib_create_srq" }, "signature_version": "v1", "digest": { "length": 2989.0, "function_hash": "227553534133244176089150362153107194047" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7186b81c1f15e39069b1af172c6a951728ed3511", "deprecated": false, "id": "CVE-2024-40990-500877fe" }, { "signature_type": "Line", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "334927236549769353150175906461618544216", "68278392652263862574546542904398891665", "259430974937903185524439658724629614516", "226299020026595965885490872679159089333", "136243526875568706259437521868788384359", "196765076116764309949999154593472395278", "245065259905275897350031582558545476142", "304073252028223189554000667596628545837", "213294911071028053896449478972650860539", "306125521526684760488987649706670629274", "78739869430645613256740900614940378844", "266250361117556481177055023472100990848" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e692244bf7dd827dd72edc6c4a3b36ae572f03c", "deprecated": false, "id": "CVE-2024-40990-53e0b7cb" }, { "signature_type": "Function", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c", "function": "mlx5_ib_create_srq" }, "signature_version": "v1", "digest": { "length": 3124.0, "function_hash": "40338112880079250275568429197372308975" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4ab99e3613139f026d2d8ba954819e2876120ab3", "deprecated": false, "id": "CVE-2024-40990-555eeb74" }, { "signature_type": "Function", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c", "function": "mlx5_ib_create_srq" }, "signature_version": "v1", "digest": { "length": 3124.0, "function_hash": "40338112880079250275568429197372308975" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36ab7ada64caf08f10ee5a114d39964d1f91e81d", "deprecated": false, "id": "CVE-2024-40990-6d10fcf1" }, { "signature_type": "Function", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c", "function": "mlx5_ib_create_srq" }, "signature_version": "v1", "digest": { "length": 3124.0, "function_hash": "40338112880079250275568429197372308975" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1e692244bf7dd827dd72edc6c4a3b36ae572f03c", "deprecated": false, "id": "CVE-2024-40990-b3dbe8d8" }, { "signature_type": "Line", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "317462489404734607168394417319514031303", "284550577579154366148643748199834579296", "48173048803891916852769144348246723271", "213294911071028053896449478972650860539", "306125521526684760488987649706670629274", "78739869430645613256740900614940378844", "266250361117556481177055023472100990848" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7186b81c1f15e39069b1af172c6a951728ed3511", "deprecated": false, "id": "CVE-2024-40990-c9dcb1a4" }, { "signature_type": "Line", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "334927236549769353150175906461618544216", "68278392652263862574546542904398891665", "259430974937903185524439658724629614516", "226299020026595965885490872679159089333", "136243526875568706259437521868788384359", "196765076116764309949999154593472395278", "245065259905275897350031582558545476142", "304073252028223189554000667596628545837", "213294911071028053896449478972650860539", "306125521526684760488987649706670629274", "78739869430645613256740900614940378844", "266250361117556481177055023472100990848" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@999586418600b4b3b93c2a0edd3a4ca71ee759bf", "deprecated": false, "id": "CVE-2024-40990-d330525b" }, { "signature_type": "Line", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "334927236549769353150175906461618544216", "68278392652263862574546542904398891665", "259430974937903185524439658724629614516", "226299020026595965885490872679159089333", "136243526875568706259437521868788384359", "196765076116764309949999154593472395278", "245065259905275897350031582558545476142", "304073252028223189554000667596628545837", "213294911071028053896449478972650860539", "306125521526684760488987649706670629274", "78739869430645613256740900614940378844", "266250361117556481177055023472100990848" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@36ab7ada64caf08f10ee5a114d39964d1f91e81d", "deprecated": false, "id": "CVE-2024-40990-dca7b13b" }, { "signature_type": "Line", "target": { "file": "drivers/infiniband/hw/mlx5/srq.c" }, "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "334927236549769353150175906461618544216", "68278392652263862574546542904398891665", "259430974937903185524439658724629614516", "226299020026595965885490872679159089333", "136243526875568706259437521868788384359", "196765076116764309949999154593472395278", "245065259905275897350031582558545476142", "304073252028223189554000667596628545837", "213294911071028053896449478972650860539", "306125521526684760488987649706670629274", "78739869430645613256740900614940378844", "266250361117556481177055023472100990848" ] }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0deb0e9c967b61420235f7f17a4450b4b4d6ce2", "deprecated": false, "id": "CVE-2024-40990-e1de4d70" } ] }