CVE-2024-41079 nvmet: always initialize cqe.result
An attacker can read uninitialized stack memory via NVMe RDMA commands due to missing initialization of the result field in the Linux kernel.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-41079?
CVE-2024-41079 is a high-severity vulnerability in Linux kernel, published on 29 Jul 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
nvmet: always initialize cqe.result
The spec doesn't mandate that the first two double words (aka results) for the command queue entry need to be set to 0 when they are not used (not specified). Though, the target implemention returns 0 for TCP and FC but not for RDMA.
Let's make RDMA behave the same and thus explicitly initializing the result field. This prevents leaking any data from the stack.
Which versions are affected by CVE-2024-41079?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-41079?
Apply the vendor's patch.
Is CVE-2024-41079 being exploited?
There is no known exploitation of CVE-2024-41079 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-68340, BELL-CVE-2024-41079, DEBIAN-CVE-2024-41079, GHSA-vq8p-qg57-9728, ROOT-OS-DEBIAN-11-CVE-2024-41079, ROOT-OS-UBUNTU-2204-CVE-2024-41079 and 1 more.