In the Linux kernel, the following vulnerability has been resolved:
nvme-fabrics: use reserved tag for reg read/write command
In some scenarios, if too many commands are issued by nvme command in the same time by user tasks, this may exhaust all tags of admin_q. If a reset (nvme reset or IO timeout) occurs before these commands finish, reconnect routine may fail to update nvme regs due to insufficient tags, which will cause kernel hang forever. In order to workaround this issue, maybe we can let reg_read32()/reg_read64()/reg_write32() use reserved tags. This maybe safe for nvmf:
1. For the disable ctrl path, we will not issue connect command 2. For the enable ctrl / fw activate path, since connect and reg_xx() are called serially.
So the reserved tags may still be enough while reg_xx() use reserved tags.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Nov 5, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Oct 9, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-48-generic | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub