01 Record

CVE-2024-53226

RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.72% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 51.3% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-12-27 13:50Z1 YR AGO

Last updated

2026-08-05 11:44Z1 MO AGO

Reserved

2024-11-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

06de64ec26e78a4be9fdb8c56a67e3544751738b585ab2664bb55cb4c54be897

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxedc2dee07ab4ae2188b9780c453a64032162a5a0 to < bd715e191d444992d6ed124f15856da5c1cae2de, 3c301b8a046b57e3de14c6fc669d81dcb71bb5b5 to < 35f5b68f63aac61d30ce0b0c6beb09b8845a3e65, 5a13652ac34be9b60feec89835763574825a8905 to < 52617e76f4963644db71dc0a17e998654dc0c7f4, 4d480e45cb7fffb9d9b49924469c1f458068080a to < 6b0d7d6e6883d0ec70cd7b5a02c47c003d5defe7, d387d4b54eb84208bd4ca13572e106851d0a0819 to < 71becb0e9df78a8d43dfd0efcef18c830a0af477, d387d4b54eb84208bd4ca13572e106851d0a0819 to < 8c269bb2cc666ca580271e1a8136c63ac9162e1e, d387d4b54eb84208bd4ca13572e106851d0a0819 to < 6b526d17eed850352d880b93b9bf20b93006bd92, ecdf900a5a3372bc0208e0701a116f112eb6039c, 5.10.224 to < 5.10.231, 5.15.165 to < 5.15.174, 6.1.103 to < 6.1.120, 6.6.44 to < 6.6.64, 6.10.3 to < 6.11, 6.11—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/bd715e191d444992d6ed124f15856da5c1cae2de
git.kernel.orghttps://git.kernel.org/stable/c/35f5b68f63aac61d30ce0b0c6beb09b8845a3e65
git.kernel.orghttps://git.kernel.org/stable/c/52617e76f4963644db71dc0a17e998654dc0c7f4
git.kernel.orghttps://git.kernel.org/stable/c/6b0d7d6e6883d0ec70cd7b5a02c47c003d5defe7
git.kernel.orghttps://git.kernel.org/stable/c/71becb0e9df78a8d43dfd0efcef18c830a0af477
git.kernel.orghttps://git.kernel.org/stable/c/8c269bb2cc666ca580271e1a8136c63ac9162e1e
git.kernel.orghttps://git.kernel.org/stable/c/6b526d17eed850352d880b93b9bf20b93006bd92
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-53226

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-53226

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References