CVE Database›Document archive›CVE-2024-47750

CVE-2024-47750

kernel: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08

Loading…

Severity

Moderate

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · October 21, 2024

Updated · September 13, 2026

Description

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the RDMA/hns component, specifically affecting the HIP08 device. This flaw occurs because the rsv_qp resource is prematurely freed before the ib_unregister_device() function is called. During this time, a local user can attempt to deregister a Memory Region (MR), which then tries to use the already freed rsv_qp. This can lead to a system crash (denial of service) or potentially allow for arbitrary code execution or information disclosure, compromising the system's confidentiality, integrity, and availability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 · Use After Free