In the Linux kernel, the following vulnerability has been resolved:
nvme-fabrics: use reserved tag for reg read/write command
In some scenarios, if too many commands are issued by nvme command in the same time by user tasks, this may exhaust all tags of admin_q. If a reset (nvme reset or IO timeout) occurs before these commands finish, reconnect routine may fail to update nvme regs due to insufficient tags, which will cause kernel hang forever. In order to workaround this issue, maybe we can let reg_read32()/reg_read64()/reg_write32() use reserved tags. This maybe safe for nvmf:
1. For the disable ctrl path, we will not issue connect command 2. For the enable ctrl / fw activate path, since connect and reg_xx() are called serially.
So the reserved tags may still be enough while reg_xx() use reserved tags.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Nov 5, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-source-vanilla | Dec 5, 2025 | Oct 9, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04a | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub