Threats tagged 'ghsa-rrxr-8q8w-wpgf'

CVE-2024-47695 is a high-severity vulnerability in the Linux kernel's RDMA rtrs-clt component. It involves an out-of-bounds memory access caused by improper handling of the connection ID (cid) during cleanup in the init_conns() function. The issue occurs when cid is set to clt_path->s.con_num, leading to access beyond valid memory bounds. The fix resets cid to clt_path->s.con_num - 1 to prevent this out-of-bounds access.