Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-38556

net/mlx5: Add a timeout to acquire the command queue semaphore

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Add a timeout to acquire the command queue semaphore Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx = -22. Instead of waiting indefinitely for the sem, blocking flow now waits for index to be allocated or a sem acquisition timeout before beginning the timer for FW completion. Kernel log example: mlx5_core 0000:06:00.0: wait_func_handle_exec_timeout:1128:(pid 185911): cmd[-22]: CREATE_UCTX(0xa04) No done completion

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8e715cd613a1e872b9d918e912d90b399785761a to < 4baae687a20ef2b82fde12de3c04461e6f2521d6affected
  • 8e715cd613a1e872b9d918e912d90b399785761a to < f9caccdd42e999b74303c9b0643300073ed5d319affected
  • 8e715cd613a1e872b9d918e912d90b399785761a to < 2d0962d05c93de391ce85f6e764df895f47c8918affected
  • 8e715cd613a1e872b9d918e912d90b399785761a to < 94024332a129c6e4275569d85c0c1bfb2ae2d71baffected
  • 8e715cd613a1e872b9d918e912d90b399785761a to < 485d65e1357123a697c591a5aeb773994b247ad7affected
  • 74dd45122b84479eee50bd0956ae8bc5799c9f8aaffected
  • e801f81cee3c8901f52ee48c6329802b28fbb49caffected
  • d73d81447c6651904dd4a9e3fd88651ff174c1b7affected
  • 4646175c19fd019b773444a11ff62748eb83745baffected
  • 5.4.174 to < 5.5affected
  • 5.10.94 to < 5.11affected
  • 5.15.17 to < 5.16affected
  • 5.16.3 to < 5.17affected

Linux Linux

Default version status: affected

  • 5.17affected
  • 0 to < 5.17unaffected
  • 6.1.93 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.8.12 to ≤ 6.8.*unaffected
  • 6.9.3 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References