CVE-2024-47750
kernel: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2024
Updated · September 13, 2026
Description
A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the RDMA/hns component, specifically affecting the HIP08 device. This flaw occurs because the rsv_qp resource is prematurely freed before the ib_unregister_device() function is called. During this time, a local user can attempt to deregister a Memory Region (MR), which then tries to use the already freed rsv_qp. This can lead to a system crash (denial of service) or potentially allow for arbitrary code execution or information disclosure, compromising the system's confidentiality, integrity, and availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 · Use After Free