# CVE-2024-50042: linux: In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-... CVE-2024-50042 is fixed in 26 products on 1 platform, first by DEBIAN-CVE-2024-50042, released October 21, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2024-50042 - Priority: High - CVSS: 7.1 (high) - EPSS: 0.0021 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 21, 2024 ## Description In the Linux kernel, the following vulnerability has been resolved: ice: Fix increasing MSI-X on VF Increasing MSI-X value on a VF leads to invalid memory operations. This is caused by not reallocating some arrays. Reproducer: modprobe ice echo 0 > /sys/bus/pci/devices/$PF_PCI/sriov_drivers_autoprobe echo 1 > /sys/bus/pci/devices/$PF_PCI/sriov_numvfs echo 17 > /sys/bus/pci/devices/$VF0_PCI/sriov_vf_msix_count Default MSI-X is 16, so 17 and above triggers this issue. KASAN reports: BUG: KASAN: slab-out-of-bounds in ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice] Read of size 8 at addr ffff8888b937d180 by task bash/28433 (...) Call Trace: (...) ? ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice] kasan_report+0xed/0x120 ? ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice] ice_vsi_alloc_ring_stats+0x38d/0x4b0 [ice] ice_vsi_cfg_def+0x3360/0x4770 [ice] ? mutex_unlock+0x83/0xd0 ? __pfx_ice_vsi_cfg_def+0x10/0x10 [ice] ? __pfx_ice_remove_vsi_lkup_fltr+0x10/0x10 [ice] ice_vsi_cfg+0x7f/0x3b0 [ice] ice_vf_reconfig_vsi+0x114/0x210 [ice] ice_sriov_set_msix_vec_count+0x3d0/0x960 [ice] sriov_vf_msix_count_store+0x21c/0x300 (...) Allocated by task 28201: (...) ice_vsi_cfg_def+0x1c8e/0x4770 [ice] ice_vsi_cfg+0x7f/0x3b0 [ice] ice_vsi_setup+0x179/0xa30 [ice] ice_sriov_configure+0xcaa/0x1520 [ice] sriov_numvfs_store+0x212/0x390 (...) To fix it, use ice_vsi_rebuild() instead of ice_vf_reconfig_vsi(). This causes the required arrays to be reallocated taking the new queue count into account (ice_vsi_realloc_stat_arrays()). Set req_txq and req_rxq before ice_vsi_rebuild(), so that realloc uses the newly set queue count. Additionally, ice_vsi_rebuild() does not remove VSI filters (ice_fltr_remove_all()), so ice_vf_init_host_cfg() is no longer necessary. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.2 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.17.2 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-coco_debug sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-livepatch-SLE15-SP6-RT_Update_5 sles 15.6 | 1-150600.1.3.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-livepatch-SLE15-SP6_Update_6 sles 15.6 | 1-150600.13.3.5 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-source sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-source-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 | | Linux | kernel-syms-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 | | Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 | | Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 | | Linux | linux Debian 13.5 (trixie) | 6.11.4-1 | [DEBIAN-CVE-2024-50042](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50042.md) | Oct 21, 2024 | | Linux | linux Debian 14 | 6.11.4-1 | [DEBIAN-CVE-2024-50042](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50042.md) | Oct 21, 2024 | --- Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.