CVE-2024-57973
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
In the Linux kernel's rdma/cxgb4 driver, an integer overflow vulnerability was found on 32-bit systems. The user-controlled 'gl->tot_len' variable can cause wrapping in addition, leading to a potential security flaw.
Risk Assessment
An attacker could exploit this vulnerability to cause unexpected driver behavior, potentially leading to system crashes or privilege escalation on 32-bit platforms.
Recommendation
Immediately update the Linux kernel to a version containing the fix that uses size_add() to prevent integer overflow.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this.