---
id: CVE-2024-40999
title: 'net: ena: Add validation for completion descriptors consistency'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ena: Add validation for completion descriptors consistency

  Validate that `first` flag is set only for the first
  descriptor in multi-buffer packets.
  In case of an …
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1738cd3ed342294360d6a74d4e58800004bff854 <
    edb9a302cc9386142beffe5d9bbe4bfd36999eee
  - >-
    Linux >= 1738cd3ed342294360d6a74d4e58800004bff854 <
    42146ee5286f16f1674a84f7c274dcca65c6ff2e
  - >-
    Linux >= 1738cd3ed342294360d6a74d4e58800004bff854 <
    b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7
  - Linux 4.9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T17:01:22.448911Z'
published: '2024-07-12'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T12:34:52.523Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-40999'
references:
  - url: 'https://git.kernel.org/stable/c/edb9a302cc9386142beffe5d9bbe4bfd36999eee'
  - url: 'https://git.kernel.org/stable/c/42146ee5286f16f1674a84f7c274dcca65c6ff2e'
  - url: 'https://git.kernel.org/stable/c/b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7'
tags:
  - cve.org
epss: 0.00533
epssPercentile: 0.44158
ingestedAt: '2026-10-21T12:48:53.736Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: ena: Add validation for completion descriptors consistency

Validate that `first` flag is set only for the first
descriptor in multi-buffer packets.
In case of an invalid descriptor, a reset will occur.
A new reset reason for RX data corruption has been added.

## Affected

- `Linux >= 1738cd3ed342294360d6a74d4e58800004bff854 < edb9a302cc9386142beffe5d9bbe4bfd36999eee`
- `Linux >= 1738cd3ed342294360d6a74d4e58800004bff854 < 42146ee5286f16f1674a84f7c274dcca65c6ff2e`
- `Linux >= 1738cd3ed342294360d6a74d4e58800004bff854 < b37b98a3a0c1198bafe8c2d9ce0bc845b4e7a9a7`
- `Linux 4.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.