目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2024-50147— Linux kernel 安全漏洞

EPSS 0.01% · P2
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2024-50147の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
net/mlx5: Fix command bitmask initialization
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command bitmask initialization Command bitmask have a dedicated bit for MANAGE_PAGES command, this bit isn't Initialize during command bitmask Initialization, only during MANAGE_PAGES. In addition, mlx5_cmd_trigger_completions() is trying to trigger completion for MANAGE_PAGES command as well. Hence, in case health error occurred before any MANAGE_PAGES command have been invoke (for example, during mlx5_enable_hca()), mlx5_cmd_trigger_completions() will try to trigger completion for MANAGE_PAGES command, which will result in null-ptr-deref error.[1] Fix it by Initialize command bitmask correctly. While at it, re-write the code for better understanding. [1] BUG: KASAN: null-ptr-deref in mlx5_cmd_trigger_completions+0x1db/0x600 [mlx5_core] Write of size 4 at addr 0000000000000214 by task kworker/u96:2/12078 CPU: 10 PID: 12078 Comm: kworker/u96:2 Not tainted 6.9.0-rc2_for_upstream_debug_2024_04_07_19_01 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Workqueue: mlx5_health0000:08:00.0 mlx5_fw_fatal_reporter_err_work [mlx5_core] Call Trace: <TASK> dump_stack_lvl+0x7e/0xc0 kasan_report+0xb9/0xf0 kasan_check_range+0xec/0x190 mlx5_cmd_trigger_completions+0x1db/0x600 [mlx5_core] mlx5_cmd_flush+0x94/0x240 [mlx5_core] enter_error_state+0x6c/0xd0 [mlx5_core] mlx5_fw_fatal_reporter_err_work+0xf3/0x480 [mlx5_core] process_one_work+0x787/0x1490 ? lockdep_hardirqs_on_prepare+0x400/0x400 ? pwq_dec_nr_in_flight+0xda0/0xda0 ? assign_work+0x168/0x240 worker_thread+0x586/0xd30 ? rescuer_thread+0xae0/0xae0 kthread+0x2df/0x3b0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x2d/0x70 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork_asm+0x11/0x20 </TASK>
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于在初始化命令掩码时未正确初始化MANAGE_PAGES命令的位。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux 9b98d395b85dd042fe83fb696b1ac02e6c93a520 ~ d1606090bb294cecb7de3c4ed177f5aa0abd4c4e -
LinuxLinux 6.1 -

II. CVE-2024-50147の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2024-50147のインテリジェンス情報

请登录查看更多情报信息。

Same Patch Batch · Linux · 2024-11-07 · 34 CVEs total

CVE-2024-50165bpf: Preserve param->string when parsing mount options
CVE-2024-50157RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
CVE-2024-50158RDMA/bnxt_re: Fix out of bound check
CVE-2024-50159firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
CVE-2024-50160ALSA: hda/cs8409: Fix possible NULL dereference
CVE-2024-50161bpf: Check the remaining info_cnt before repeating btf fields
CVE-2024-50162bpf: devmap: provide rxq after redirect
CVE-2024-50163bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
CVE-2024-50164bpf: Fix overloading of MEM_UNINIT's meaning
CVE-2024-50156drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
CVE-2024-50166fsl/fman: Fix refcount handling of fman-related devices
CVE-2024-50167be2net: fix potential memory leak in be_xmit()
CVE-2024-50168net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
CVE-2024-50169vsock: Update rx_bytes on read_skb()
CVE-2024-50170net: bcmasp: fix potential memory leak in bcmasp_xmit()
CVE-2024-50171net: systemport: fix potential memory leak in bcm_sysport_xmit()
CVE-2024-50172RDMA/bnxt_re: Fix a possible memory leak
CVE-2024-50139KVM: arm64: Fix shift-out-of-bounds bug
CVE-2024-50155netdevsim: use cond_resched() in nsim_dev_trap_report_work()
CVE-2024-50154tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().

Showing 20 of 34 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2024-50147へのコメント

まだコメントはありません

コメントを残す