CVE-2024-40999
MEDIUM
MEDIUM
Priority: 0.04
BB Relevance:
36/100
Published: 2024-07-12
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that `first` flag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a reset will occur. A new reset reason for RX data corruption has been added.
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 1738cd3ed342294360d6a74d4e58800004bff854 < 4f163a8035e76e835a984cf548b3e6922cfe145f |
| Linux | Linux | 1738cd3ed342294360d6a74d4e58800004bff854 < edb9a302cc9386142beffe5d9bbe4bfd36999eee |
| Linux | Linux | 1738cd3ed342294360d6a74d4e58800004bff854 < 42146ee5286f16f1674a84f7c274dcca65c6ff2e |
| Linux | Linux | 1738cd3ed342294360d6a74d4e58800004bff854 < b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7 |
| Linux | Linux | 4.9 |
| linux | linux_kernel | 4.9 – 6.9.7 |