CVE-2024-47695 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to connum - 1 to stay in bounds In the function initconns, after the createcon and createcm for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory becaus...

CVE-2024-47695 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Reset cid to connum - 1 to stay in bounds In the function initconns, after the createcon and createcm for loop if something fails. In the cleanup for loop after the destroy tag, we access out of bound memory becaus...

CVE-2024-47695

CVE-2024-47695 affects the Linux kernel RDMA/rtrs-clt component. The bug occurs in init_conns() cleanup: after create_con() and create_cm(), cid can go out of bounds, leading to out-of-bounds memory access when clt_path->s.con_num is used. A patch fixes this by resetting cid to clt_path->s....