CVE-2024-43866

net/mlx5: Always drain health in shutdown callback

Summary

Original description

The description as published by the source.

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Always drain health in shutdown callback

There is no point in recovery during device shutdown. if health
work started need to wait for it to avoid races and NULL pointer
access.

Hence, drain health WQ on shutdown callback.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Linux Kernel

[{"type":"ECOSYSTEM","events":[{"introduced":"4.14.0"},{"fixed":"6.1.113"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.45"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.10.4"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-43866 linux
Ubuntu UBUNTU-CVE-2024-43866 linux-azure

References

advisory github.com
advisory nvd.nist.gov
package git.kernel.org
web git.kernel.org
web git.kernel.org
web git.kernel.org
web git.kernel.org
web lists.debian.org