Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40999
HistoryJul 12, 2024 - 12:37 p.m.

CVE-2024-40999 net: ena: Add validation for completion descriptors consistency

2024-07-1212:37:40
Linux
github.com
1
linux kernel
vulnerability
completion descriptors
validation
reset
data corruption

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

net: ena: Add validation for completion descriptors consistency

Validate that first flag is set only for the first
descriptor in multi-buffer packets.
In case of an invalid descriptor, a reset will occur.
A new reset reason for RX data corruption has been added.

AI Score

7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial