CVE-2024-53226 RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
A missing NULL pointer check in the Linux kernel RDMA driver allows attackers to cause a system crash via denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53226?
CVE-2024-53226 is a high-severity vulnerability in Linux kernel, published on 27 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
ib_map_mr_sg() allows ULPs to specify NULL as the sg_offset argument. The driver needs to check whether it is a NULL pointer before dereferencing it.
Weakness: CWE-476
Which versions are affected by CVE-2024-53226?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-53226?
Apply the vendor's patch.
Is CVE-2024-53226 being exploited?
There is no known exploitation of CVE-2024-53226 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-55175, AZL-55212, BELL-CVE-2024-53226, DEBIAN-CVE-2024-53226, GHSA-84gj-7736-4xgg, UBUNTU-CVE-2024-53226.