CVE-2024-57857: RDMA/siw: Remove direct link to net_device

CVE-2024-57857 PUBLISHED CVSS 7.8 HIGH

RDMA/siw: Remove direct link to net_device

Reported by linux · Published January 15, 2025

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to net_device Do not manage a per device direct link to net_device. Rely on associated ib_devices net_device management, not doubling the effort locally. A badly managed local link to net_device was causing a 'KASAN: slab-use-after-free' exception during siw_query_port() call.

Risk scores

CVSS 3.1

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Linux	Linux	bdcf26bf9b3acb03c8f90387cfc6474fc8ac5521, bdcf26bf9b3acb03c8f90387cfc6474fc8ac5521, bdcf26bf9b3acb03c8f90387cfc6474fc8ac5521
Linux	Linux	5.3, 0, 6.6.160
linux	linux_kernel	5.3, 5.3, 5.3
Linux	Linux	, , 5.3

Timeline

Jan 15, 2025 CVE Published
Jan 16, 2025 EPSS Score (30 in total, the first dated here)
Feb 24, 2025 Coalition ESS Score (6 in total, the first dated here)
Dec 16, 2025 PoC Published
Dec 29, 2025 Security Advisory (85 in total, the first dated here)
Sep 24, 2026 Distribution Patch (60 in total, the first dated here)
Oct 8, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-57857
vulnetix vdb fixes CVE-2024-57857

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-57857/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →