CVE-2024-47749

MediumCVSS 5.5/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cxgb4: Added NULL check for lookup_atid

The lookup_atid() function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the `act_establish()` and `act_open_rpl()` functions. Add a NULL check to prevent null pointer dereferencing.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= cfdda9d764362ab77b11a410bb928400e6520d57, < b12e25d91c7f97958341538c7dc63ee49d01548f; >= cfdda9d764362ab77b11a410bb928400e6520d57, < 4e1fe68d695af367506ea3c794c5969630f21697; >= cfdda9d764362ab77b11a410bb928400e6520d57, < dd598ac57dcae796cb58551074660c39b43fb155; >= cfdda9d764362ab77b11a410bb928400e6520d57, < b11318dc8a1ec565300bb1a9073095af817cc508; >= cfdda9d764362ab77b11a410bb928400e6520d57, < 39cb9f39913566ec5865581135f3e8123ad1aee1; >= cfdda9d764362ab77b11a410bb928400e6520d57, < 0d50ae281a1712b9b2ca72830a96b8f11882358d; >= cfdda9d764362ab77b11a410bb928400e6520d57, < 54aaa3ed40972511e423b604324b881425b9ff1e; >= cfdda9d764362ab77b11a410bb928400e6520d57, < b9c94c8ba5a713817cffd74c4bacc05187469624; >= cfdda9d764362ab77b11a410bb928400e6520d57, < e766e6a92410ca269161de059fff0843b8ddd65f
LinuxLinux2.6.35

References

Timeline

Published
Oct 21, 2024
Last modified
Aug 4, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-47755.9An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and unCVE-2024-477507.8In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is frCVE-2024-477517.8In the Linux kernel, the following vulnerability has been resolved: PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() Within kiriCVE-2024-477525.5In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning FixCVE-2024-477535.5In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning Fix CVE-2024-477545.5In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warninCVE-2024-477565.5In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This codCVE-2024-477577.1In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The functCVE-2024-477588.8GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can uCVE-2024-477594.8GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then CVE-2024-47768.2A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox < 126CVE-2024-477608.8GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access
CVE-2024-47749: Medium severity, CVSS 5.5 | Vulnix