In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Add a timeout to acquire the command queue semaphore
Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx = -22. Instead of waiting indefinitely for the sem, blocking flow now waits for index to be allocated or a sem acquisition timeout before beginning the timer for FW completion.
Kernel log example: mlx5_core 0000:06:00.0: wait_func_handle_exec_timeout:1128:(pid 185911): cmd[-22]: CREATE_UCTX(0xa04) No done completion
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64kUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-debug-develUpgrade rtlaUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debugUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade perfUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-core | Oct 28, 2024 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-modules-extraUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perf-debuginfo | May 14, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Oct 9, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 13, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debuginfoUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade libperfUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-coreUpgrade libperf-debuginfoUpgrade kernel-devel-matchedUpgrade rvUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-cross-headers | Nov 4, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade kernel-macrosUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-armUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-rtUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-azure-livepatch-devel | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-oracle-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub