CVE-2024-57973
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 190
Summary
CVE-2024-57973: A vulnerability was discovered in the Linux kernel's rdma/cxgb4 component. The issue involves potential integer overflow on 32-bit systems. The "gl->tot_len" variable, which is user-controlled and comes from process_responses(), is susceptible to this problem. The addition of "gl->tot_len + sizeof(struct ncpl_pass_accept_req) + sizeof(struct rss_header)" could result in an integer wrapping bug. To mitigate this issue, the use of size_add() is recommended.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.