Vulnerability details
CVE-2024-57973
Linux LinuxSiemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFPSiemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPSiemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
rdma/cxgb4: Prevent potential integer overflow on 32bit
CVSS 3.1
8.1High
Official description
In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.1High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 3.8 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < d64148a10a85952352de6091ceed99fb9ce2d3ee | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < e53ca458f543aa352d09b484550de173cb9085c2 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < 4422f452d028850b9cc4fd8f1cf45a8ff91855eb | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < 2b759f78b83221f4a1cae3aeb20b500e375f3ee6 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < dd352107f22bfbecbbf3b74bde14f3f932296309 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < aeb814484387811b3579d5c78ad4eb301e3bf1c8 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < bd96a3935e89486304461a21752f824fc25e0f0b | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 1cab775c3e75f1250c965feafd061d696df36e53 ≤ v < de8d88b68d0cfd41152a7a63d6aec0ed3e1b837a | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.6 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.6 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.7 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.7 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.6 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.6 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.7 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.7 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.6 ≤ v | CVEProject cvelistV5 (CNA) |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.7 ≤ v | CVEProject cvelistV5 (CNA) |
References and advisories
12- https://git.kernel.org/stable/c/2b759f78b83221f4a1cae3aeb20b500e375f3ee6
- https://git.kernel.org/stable/c/d64148a10a85952352de6091ceed99fb9ce2d3ee
- https://git.kernel.org/stable/c/e53ca458f543aa352d09b484550de173cb9085c2
- https://git.kernel.org/stable/c/4422f452d028850b9cc4fd8f1cf45a8ff91855eb
- https://git.kernel.org/stable/c/de8d88b68d0cfd41152a7a63d6aec0ed3e1b837a
- https://git.kernel.org/stable/c/dd352107f22bfbecbbf3b74bde14f3f932296309
- https://git.kernel.org/stable/c/aeb814484387811b3579d5c78ad4eb301e3bf1c8
- https://git.kernel.org/stable/c/bd96a3935e89486304461a21752f824fc25e0f0b
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-02-27
- Last updated
- 2026-10-16
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.66%
Probability of exploitation in 30 days
52%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- —