Security readout for executives and security teams
Plain-English summary
A Linux RDMA RTRS client cleanup error can access memory beyond an allocated connection array when connection setup fails. This may crash or corrupt affected systems. The supplied CVSS rating is 9.8, but the sources do not establish practical attacker control or real-world exploitation.
Executive priority
Treat as urgent on infrastructure using RDMA RTRS, especially where service disruption or kernel compromise would have high impact. Prioritize exposure confirmation and supported kernel updates. Systems without this functionality are less likely to be exposed, but that should be verified rather than assumed.
Technical view
In init_conns(), a failed create_con() or create_cm() path leaves cid equal to con_num. The subsequent cleanup loop uses that out-of-range index after destroying a tag. The Linux fix resets cid to con_num minus one before cleanup.
Likely exposure
Exposure is limited to Linux systems running an affected kernel and using the RDMA RTRS client functionality. The bundle lists multiple affected kernel lines, but its flattened version data is ambiguous; confirm exact vulnerable and corrected package versions through kernel or distribution advisories.
Exploitation context
The CVSS vector characterizes this as network-accessible, low-complexity, unauthenticated, and requiring no user interaction. However, KEV is false, and the supplied sources provide no evidence of active exploitation, a public exploit, or reliable attacker control over the initialization failure.
Researcher notes
The documented defect is an out-of-bounds cleanup access reached after connection-creation failure. The sources do not identify the accessed object, memory-safety outcome, attacker-controlled inputs, or demonstrated confidentiality and integrity impact. The 9.8 score should therefore be considered alongside deployment-specific reachability and trigger analysis.
Mitigation direction
- Update to a vendor-supported kernel containing the applicable cited fix or backport.
- Check Linux distribution advisories for corrected package versions before deployment.
- Prioritize systems actively using RDMA RTRS client functionality.
- Consult vendor guidance for temporary mitigations if immediate kernel updating is impossible.
Validation and detection
- Inventory kernel versions and identify systems loading or using the RDMA RTRS client.
- Compare installed kernel changelogs against the applicable cited fix commit.
- Confirm corrected kernel package versions with the operating-system vendor.
- After updating, verify the new kernel is running and RDMA workloads operate normally.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-47695 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Critical
- CVSS
- 9.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H3.95.9LinuxVulnerability scoring details
Base CVSS 3.1 score
9.8CriticalVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/0429a4e972082e3a2351da414b1c017daaf8aed2CVE reference, Linux
- https://git.kernel.org/stable/c/5ac73f8191f3de41fef4f934d84d97f3aadb301fCVE reference, Linux
- https://git.kernel.org/stable/c/01b9be936ee8839ab9f83a7e84ee02ac6c8303c4CVE reference, Linux
- https://git.kernel.org/stable/c/1c50e0265fa332c94a4a182e4efa0fc70d8fad94CVE reference, Linux
- https://git.kernel.org/stable/c/c8b7f3d9fada0d4b4b7db86bf7345cd61f1d972eCVE reference, Linux
- https://git.kernel.org/stable/c/3e4289b29e216a55d08a89e126bc0b37cbad9f38CVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlCVE reference, CVE
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.