一、漏洞信息

漏洞编号：[CVE-2024-50158](https://nvd.nist.gov/vuln/detail/CVE-2024-50158)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:RDMA/bnxt_re: Fix out of bound checkDriver exports pacing stats only on GenP5 and P7 adapters. But whileparsing the pacing stats, driver has a check for rdev->dbr_pacing . Thiscaused a trace when KASAN is enabled.BUG: KASAN: slab-out-of-bounds in bnxt_re_get_hw_stats+0x2b6a/0x2e00 [bnxt_re]Write of size 8 at addr ffff8885942a6340 by task modprobe/4809

漏洞公开时间：2024-11-07 18:15:07

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-50158

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05c5fcc1869a08e36a29691699b6534e5a00a82b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a9e6e7443922ac0a48243c35d03834c96926bff1 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/c11b9b03ea5252898f91f3388c248f0dc47bda52 | |

</details>

漏洞分析指导链接：

https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md

漏洞数据来源:

openBrain开源漏洞感知系统

漏洞补丁信息：

<details>

<summary>详情(点击展开)</summary>

无

</details>

二、漏洞分析结构反馈

影响性分析说明：

openEuler评分：

受影响版本排查(受影响/不受影响)：

1.master(6.6.0):

2.openEuler-20.03-LTS-SP4(4.19.90):

3.openEuler-22.03-LTS-SP1(5.10.0):

4.openEuler-22.03-LTS-SP3(5.10.0):

5.openEuler-22.03-LTS-SP4(5.10.0):

6.openEuler-24.03-LTS(6.6.0):

7.openEuler-24.03-LTS-Next(6.6.0):

修复是否涉及abi变化(是/否)：

1.master(6.6.0):

2.openEuler-20.03-LTS-SP4(4.19.90):

3.openEuler-22.03-LTS-SP1(5.10.0):

4.openEuler-22.03-LTS-SP3(5.10.0):

5.openEuler-22.03-LTS-SP4(5.10.0):

6.openEuler-24.03-LTS(6.6.0):

7.openEuler-24.03-LTS-Next(6.6.0):

原因说明：

1.master(6.6.0):

2.openEuler-20.03-LTS-SP4(4.19.90):

3.openEuler-22.03-LTS-SP1(5.10.0):

4.openEuler-22.03-LTS-SP3(5.10.0):

5.openEuler-22.03-LTS-SP4(5.10.0):

6.openEuler-24.03-LTS(6.6.0):

7.openEuler-24.03-LTS-Next(6.6.0):

一、漏洞信息

漏洞编号：[CVE-2024-50158](https://nvd.nist.gov/vuln/detail/CVE-2024-50158)

漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)

漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0,6.6.0

CVSS V3.0分值：

BaseScore：0.0 None

Vector：CVSS：3.0/

漏洞简述：

In the Linux kernel, the following vulnerability has been resolved:RDMA/bnxt_re: Fix out of bound checkDriver exports pacing stats only on GenP5 and P7 adapters. But whileparsing the pacing stats, driver has a check for rdev->dbr_pacing . Thiscaused a trace when KASAN is enabled.BUG: KASAN: slab-out-of-bounds in bnxt_re_get_hw_stats+0x2b6a/0x2e00 [bnxt_re]Write of size 8 at addr ffff8885942a6340 by task modprobe/4809

漏洞公开时间：2024-11-07 18:15:07

漏洞创建时间：2024-11-07 18:30:10

漏洞详情参考链接：

https://nvd.nist.gov/vuln/detail/CVE-2024-50158

<details>

<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |

| ------- | -------- | -------- |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/05c5fcc1869a08e36a29691699b6534e5a00a82b | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/a9e6e7443922ac0a48243c35d03834c96926bff1 | |

| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/c11b9b03ea5252898f91f3388c248f0dc47bda52 | |