CVE-2024-53094

Source
https://cve.org/CVERecord?id=CVE-2024-53094
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53094.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-53094
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
ECHO (1)
MGASA (2)
OESA (1)
ROOT (3)
SUSE (8)
UBUNTU (1)
Related
Published
2024-11-21T18:17:10Z
Modified
2026-11-01T02:30:22Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES

While running ISER over SIW, the initiator machine encounters a warning from skb_splice_from_iter() indicating that a slab page is being used in send_page. To address this, it is better to add a sendpage_ok() check within the driver itself, and if it returns 0, then MSG_SPLICE_PAGES flag should be disabled before entering the network stack.

A similar issue has been discussed for NVMe in this thread: https://lore.kernel.org/all/20240530142417.146696-1-ofir.gal@volumez.com/

WARNING: CPU: 0 PID: 5342 at net/core/skbuff.c:7140 skb_splice_from_iter+0x173/0x320 Call Trace: tcp_sendmsg_locked+0x368/0xe40 siw_tx_hdt+0x695/0xa40 [siw] siw_qp_sq_process+0x102/0xb00 [siw] siw_sq_resume+0x39/0x110 [siw] siw_run_sq+0x74/0x160 [siw] kthread+0xd2/0x100 ret_from_fork+0x34/0x40 ret_from_fork_asm+0x1a/0x30

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53094.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0e935ae6afcdbe6f0c0aa457ae57feccc63bb9be
Fixed
d5a019e819a0f0457570416bb2eb5f3321f5be81
Fixed
3406bfc813a9bbd9c3055795e985f527b7852e8c
Fixed
bb5738957d92c8603a90c9664d34236641c221b2
Fixed
4e1e3dd88a4cedd5ccc1a3fc3d71e03b70a7a791

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53094.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.3.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.62
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-53094.json"