In the Linux kernel, the following vulnerability has been resolved:
nvme-fabrics: use reserved tag for reg read/write command
In some scenarios, if too many commands are issued by nvme command in the same time by user tasks, this may exhaust all tags of admin_q. If a reset (nvme reset or IO timeout) occurs before these commands finish, reconnect routine may fail to update nvme regs due to insufficient tags, which will cause kernel hang forever. In order to workaround this issue, maybe we can let reg_read32()/reg_read64()/reg_write32() use reserved tags. This maybe safe for nvmf:
1. For the disable ctrl path, we will not issue connect command 2. For the enable ctrl / fw activate path, since connect and reg_xx() are called serially.
So the reserved tags may still be enough while reg_xx() use reserved tags.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Nov 5, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-default-man | Dec 5, 2025 | Oct 9, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-64k | Nov 4, 2024 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub