{"id":"CVE-2024-40999","revision":"0ab585b4a109407783bb3335aad12999","records":[{"revision":"0ab585b4a109407783bb3335aad12999","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-40999","aliases":[],"title":"net: ena: Add validation for completion descriptors consistency","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ena: Add validation for completion descriptors consistency\n\nValidate that `first` flag is set only for the first\ndescriptor in multi-buffer packets.\nIn case of an invalid descriptor, a reset will occur.\nA new reset reason for RX data corruption has been added.","state":0,"publishedAt":"2024-07-12T12:37:40.507+00:00","modifiedAt":"2026-10-21T12:34:52.523+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/amazon/ena/ena_eth_com.c\",\n                        \"drivers/net/ethernet/amazon/ena/ena_netdev.c\",\n                        \"drivers/net/ethernet/amazon/ena/ena_regs_defs.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"1738cd3ed342294360d6a74d4e58800004bff854\",\n                            \"lessThan\": \"edb9a302cc9386142beffe5d9bbe4bfd36999eee\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1738cd3ed342294360d6a74d4e58800004bff854\",\n                            \"lessThan\": \"42146ee5286f16f1674a84f7c274dcca65c6ff2e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1738cd3ed342294360d6a74d4e58800004bff854\",\n                            \"lessThan\": \"b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/amazon/ena/ena_eth_com.c\",\n                        \"drivers/net/ethernet/amazon/ena/ena_netdev.c\",\n                        \"drivers/net/ethernet/amazon/ena/ena_regs_defs.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.9\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9.7\",\n                            \"lessThanOrEqual\": \"6.9.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://git.kernel.org/stable/c/edb9a302cc9386142beffe5d9bbe4bfd36999eee","https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e","https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-40999","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-40999","identifiers":["CVE-2024-40999"]},"retained":false,"historicalAffected":[]}],"coverage":[]}