High 8.1Published Feb 26, 2025

CVE-2024-57973rdma/cxgb4: Prevent potential integer overflow on 32bit

Updated under an hour ago (Oct 26, 2026, 9:50 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" addition could have an integer wrapping bug. Use size_add() to prevent this.

CVSS: 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1cab775c3e75f1250c965feafd061d696df36e53 before 2b759f78b83221f4a1cae3aeb20b500e375f3ee6; from 1cab775c3e75f1250c965feafd061d696df36e53 before d64148a10a85952352de6091ceed99fb9ce2d3ee; from 1cab775c3e75f1250c965feafd061d696df36e53 before e53ca458f543aa352d09b484550de173cb9085c2; from 1cab775c3e75f1250c965feafd061d696df36e53 before 4422f452d028850b9cc4fd8f1cf45a8ff91855eb; from 1cab775c3e75f1250c965feafd061d696df36e53 before de8d88b68d0cfd41152a7a63d6aec0ed3e1b837a; from 1cab775c3e75f1250c965feafd061d696df36e53 before dd352107f22bfbecbbf3b74bde14f3f932296309; from 1cab775c3e75f1250c965feafd061d696df36e53 before aeb814484387811b3579d5c78ad4eb301e3bf1c8; from 1cab775c3e75f1250c965feafd061d696df36e53 before bd96a3935e89486304461a21752f824fc25e0f0b	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 3.8 before 6.1.129; from 6.2 before 6.6.76; from 6.7 before 6.12.13; from 6.13 before 6.13.2	NVD

References

References

https://git.kernel.org/stable/c/2b759f78b83221f4a1cae3aeb20b500e375f3ee6
https://git.kernel.org/stable/c/d64148a10a85952352de6091ceed99fb9ce2d3ee
https://git.kernel.org/stable/c/e53ca458f543aa352d09b484550de173cb9085c2
https://git.kernel.org/stable/c/4422f452d028850b9cc4fd8f1cf45a8ff91855eb	patch
https://git.kernel.org/stable/c/de8d88b68d0cfd41152a7a63d6aec0ed3e1b837a	patch
https://git.kernel.org/stable/c/dd352107f22bfbecbbf3b74bde14f3f932296309	patch
https://git.kernel.org/stable/c/aeb814484387811b3579d5c78ad4eb301e3bf1c8	patch
https://git.kernel.org/stable/c/bd96a3935e89486304461a21752f824fc25e0f0b	patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.