CVE-2024-44933

Summary

CVE-2024-44933 is a vulnerability in the Linux kernel that affects various products, including xTe7Pu, xuLHbp, xrjq7Z, xs2Hgw, x-PQNV, and xs1Dpc. The flaw arises from an improper handling of the RSS indirection table in the bnxt_fill_hw_rss_tbl() function when using older firmware, which can lead to out-of-bounds memory access. To remediate this issue, users are advised to apply the appropriate patches provided in recent commits to the kernel. The vulnerability has a medium severity rating with an availability impact score of high and an exploitability score of 1.8, indicating a local attack vector that does not require user interaction but could potentially disrupt system availability. Organizations utilizing affected products should prioritize patching to mitigate risks associated with this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.