PT-2024-33966 · Linux+5 · Linux Kernel+5
Published
2024-10-15
·
Updated
2026-05-26
·
CVE-2024-50135
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
A race condition exists between reset and nvme dev disable() in the Linux kernel. The nvme dev disable() function modifies the dev->online queues field, and nvme pci update nr queues() should avoid racing against it to prevent passing invalid values to blk mq update nr hw queues(). This issue can cause errors, including a warning message indicating a CPU issue and a call trace involving various kernel functions.
Recommendations:
For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider applying a patch that locks the shutdown lock mutex before using dev->online queues to prevent the race condition. Give up if nvme dev disable() is running or if it has been executed already.
Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu