CVE-2024-57936 Details
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causing traffic failures and system crashes. Use the define for max SGE supported for variable size. This will work for both static and variable WQEs.
A vulnerability in the Linux kernel's RDMA/bnxt_re component has been addressed, concerning the maximum number of scatter-gather elements (SGEs) for Work Requests. The P7 version currently supports up to 13 SGEs, but the Work Queue Entry (WQE) software structure can only accommodate 6. This mismatch allows the stack to process requests with up to 13 SGEs, leading to traffic failures and system crashes. The vulnerability arose because the maximum SGE limit was not properly defined for variable-sized WQEs, causing issues for both static and variable WQEs.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3de1b50f055dc2ca7072a526cdda21f691c22dd9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/79d330fbdffd8cee06d8bdf38d82cb62d8363a27 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9a479088e0c8f6140b8c7752b563bc8c6c6dcc8c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.12, < 6.12.9 6.13 rc1 6.13 rc2 6.13 rc3 6.13 rc4 6.13 rc5 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 15, 2025 | Initial Analysis | [email protected] |
| Jan 21, 2025 | New CVE Received | kernel.org |