Security tracker / CVE-2024-38545

CVE-2024-38545

RDMA/hns: Fix UAF for cq async event

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 9a4435375cd1 ("IB/hns: Add driver files for hns RoCE driver").
 carnil> Vulnerable versions: 4.9-rc1.

Bugs

Status

Branch	Status
upstream	released (6.10-rc1) [a942ec2745ca864cd8512142100e4027dc306a42]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.9-upstream-stable	released (6.9.3) [37a7559dc1358a8d300437e99ed8ecdab0671507]
6.6-upstream-stable	released (6.6.33) [63da190eeb5c9d849b71f457b15b308c94cbaf08]
6.1-upstream-stable	released (6.1.93) [763780ef0336a973e933e40e919339381732dcaf]
5.10-upstream-stable	needed
sid	released (6.8.12-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.94-1)
5.10-bullseye-security	needed