CVE-2024-53151 svcrdma: Address an integer overflow
An integer overflow in the Linux kernel's svcrdma module allows remote attackers to cause a denial of service via crafted network packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53151?
CVE-2024-53151 is a high-severity vulnerability in Linux kernel, published on 24 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Address an integer overflow
Dan Carpenter reports: > Commit 78147ca8b4a9 ("svcrdma: Add a "parsed chunk list" data > structure") from Jun 22, 2020 (linux-next), leads to the following > Smatch static checker warning: > > net/sunrpc/xprtrdma/svc_rdma_recvfrom.c:498 xdr_check_write_chunk() > warn: potential user controlled sizeof overflow 'segcount * 4 * 4' > > net/sunrpc/xprtrdma/svc_rdma_recvfrom.c > 488 static bool xdr_check_write_chunk(struct svc_rdma_recv_ctxt *rctxt) > 489 { > 490 u32 segcount; > 491 __be32 *p; > 492 > 493 if (xdr_stream_decode_u32(&rctxt->rc_stream, &segcount)) > ^^^^^^^^ > > 494 return false; > 495 > 496 /* A bogus segcount causes this buffer overflow check to fail. */ > 497 p = xdr_inline_decode(&rctxt->rc_stream, > --> 498 segcount * rpcrdma_segment_maxsz * sizeof(*p)); > > > segcount is an untrusted u32. On 32bit systems anything >= SIZE_MAX / 16 will > have an integer overflow and some those values will be accepted by > xdr_inline_decode().
Weakness: CWE-190
Which versions are affected by CVE-2024-53151?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-53151?
Apply the vendor's patch.
Is CVE-2024-53151 being exploited?
There is no known exploitation of CVE-2024-53151 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-54984, AZL-55020, BELL-CVE-2024-53151, DEBIAN-CVE-2024-53151, GHSA-fcx4-qhgw-9q8f, UBUNTU-CVE-2024-53151.