CVE-2024-40999
- Source
- https://cve.org/CVERecord?id=CVE-2024-40999
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-40999.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-40999
- Downstream
BELL (1)
DEBIAN (1)
ECHO (1)
ROOT (3)
SUSE (11)
- Related
- Published
- 2024-07-12T12:37:40Z
- Modified
- 2026-11-01T02:30:17Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- net: ena: Add validation for completion descriptors consistency
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: ena: Add validation for completion descriptors consistency
Validate that
firstflag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a reset will occur. A new reset reason for RX data corruption has been added. - Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40999.json" }- References
-
- https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e
- https://git.kernel.org/stable/c/4f163a8035e76e835a984cf548b3e6922cfe145f
- https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7
- https://git.kernel.org/stable/c/edb9a302cc9386142beffe5d9bbe4bfd36999eee
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40999.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-40999
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced1738cd3ed342294360d6a74d4e58800004bff854Fixed4f163a8035e76e835a984cf548b3e6922cfe145fFixededb9a302cc9386142beffe5d9bbe4bfd36999eeeFixed42146ee5286f16f1674a84f7c274dcca65c6ff2eFixedb37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7