QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-57973

Back to search

CVE-2024-57973

Published: Feb 27, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this.

VendorProductVersions

Linux

Linux

affected
1cab775c3e75f1250c965feafd061d696df36e53 - < 2b759f78b83221f4a1cae3aeb20b500e375f3ee6
affected
1cab775c3e75f1250c965feafd061d696df36e53 - < d64148a10a85952352de6091ceed99fb9ce2d3ee
affected
1cab775c3e75f1250c965feafd061d696df36e53 - < e53ca458f543aa352d09b484550de173cb9085c2
affected
1cab775c3e75f1250c965feafd061d696df36e53 - < 4422f452d028850b9cc4fd8f1cf45a8ff91855eb
affected
1cab775c3e75f1250c965feafd061d696df36e53 - < de8d88b68d0cfd41152a7a63d6aec0ed3e1b837a

+3 more versions

Linux

Linux

affected
3.8
unaffected
0 - < 3.8
unaffected
5.4.291 - <= 5.4.*
unaffected
5.10.235 - <= 5.10.*
unaffected
5.15.179 - <= 5.15.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now