Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-38545 Details

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. When CQ asynchronous events and CQ destruction are concurrent, CQ may have been released, which will cause UAF. Use the xa_lock() to protect the CQ refcount.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/330c825e66ef65278e4ebe57fd49c1d6f3f4e34e kernel.orgPatch
https://git.kernel.org/stable/c/37a7559dc1358a8d300437e99ed8ecdab0671507 kernel.orgPatch
https://git.kernel.org/stable/c/39d26cf46306bdc7ae809ecfdbfeff5aa1098911 kernel.orgPatch
https://git.kernel.org/stable/c/63da190eeb5c9d849b71f457b15b308c94cbaf08 kernel.orgPatch
https://git.kernel.org/stable/c/763780ef0336a973e933e40e919339381732dcaf kernel.orgPatch

see all 11 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-416Use After Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 4.9, < 5.15.168
>= 5.16, < 6.1.93
>= 6.2, < 6.6.33
>= 6.7, < 6.8.12
>= 6.9, < 6.9.3

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-38545
NVD Published Date:
Jun 19, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-38545 Details - Not Deferred