Lucene search

LinuxVULNRICHMENT:CVE-2024-42162

HistoryJul 30, 2024 - 7:47 a.m.

CVE-2024-42162 gve: Account for stopped queues when reading NIC stats

2024-07-3007:47:04

Linux

github.com

linux kernel

vulnerability

gve

nic stats

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

gve: Account for stopped queues when reading NIC stats

We now account for the fact that the NIC might send us stats for a
subset of queues. Without this change, gve_get_ethtool_stats might make
an invalid access on the priv->stats_report->stats array.

References

git.kernel.org/stable/c/32675d828c8a392e20d5b42375ed112c407e4b62

git.kernel.org/stable/c/af9bcf910b1f86244f39e15e701b2dc564b469a6