CVE-2024-47749

A flaw was found in the Linux kernel's RDMA/cxgb4 component. An attacker could trigger a null pointer dereference by providing an invalid or non-existent Asynchronous Transfer Identifier (ATID) during a lookup operation. This vulnerability, if exploited, could lead to a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the cxgb4 kernel module from loading if Chelsio T4/T5/T6 network adapters are not in use. This can be done by creating a blacklist file.

1. Create a file named /etc/modprobe.d/blacklist-cxgb4.conf with the following content:

   blacklist cxgb4
   

2. Reboot the system for the change to take effect.

This mitigation may impact functionality if Chelsio T4/T5/T6 network adapters are required for system operation.