PT-2024-30723 · Linux+7 · Linux Kernel+7

Xiangyu Chen · Published 2024-07-30 · Updated 2026-05-26 · CVE-2024-43866

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the net/mlx5 component in the Linux kernel. During device shutdown, there is no point in recovery, and if health work has started, it needs to wait to avoid races and NULL pointer access. The solution is to drain the health work queue on shutdown callback.

Recommendations For versions prior to 6.6.50, update to version 6.6.50 or later to resolve the issue.

Exploit

Fix

DoS

NULL Pointer Dereference

Race Condition

Weakness Enumeration

CWE-476

CWE-362

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

AZL-56163

BDU:2025-08027

CVE-2024-43866

DLA-4008-1

INFSA-2024_9315

MGASA-2024-0309

MGASA-2024-0310

OESA-2024-2076

OESA-2024-2077

OESA-2024-2078

OESA-2024-2080

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3483-1

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2024:3189-1

SUSE-SU-2024:3190-1

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3251-1

SUSE-SU-2024:3252-1

SUSE-SU-2024:3383-1

SUSE-SU-2024:3483-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7196-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 2034

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43866.json · Exploit
• https://ubuntu.com/security/CVE-2024-41064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48899 · Security Note
• https://ubuntu.com/security/CVE-2024-42114 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46672 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42271 · Security Note
• https://ubuntu.com/security/CVE-2024-46761 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-44975 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46716 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43866 · Security Note
• https://ubuntu.com/security/CVE-2024-42272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41054 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-42063 · Security Note