8.1 High

CVE-2024-57973 In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on…

Description

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this.

Affected products and versions

Product	Affected versions	Fixed in
Linux 6.14	earliest → < 6.14	6.14
Linux 6.13	earliest → < 6.13.2	6.13.2
Linux 6.12	earliest → < 6.12.13	6.12.13
Linux 6.6	earliest → < 6.6.76	6.6.76
Linux 6.1	earliest → < 6.1.129	6.1.129
Linux 5.15	earliest → < 5.15.179	5.15.179
Linux 5.10	earliest → < 5.10.235	5.10.235
Linux 5.4	earliest → < 5.4.291	5.4.291
Linux	3.8	No fix stated

Show the 3 other branches

Product	Affected versions	Fixed in
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.7 → latest	No fix stated
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1	3.1.7 → latest	No fix stated
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.7 → latest	No fix stated