CVE-2024-38556 net/mlx5: Add a timeout to acquire the command queue semaphore
A missing timeout in the mlx5 network driver allows an out-of-bounds access, potentially causing a kernel crash or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-38556?
CVE-2024-38556 is a high-severity vulnerability in Linux kernel, published on 19 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Add a timeout to acquire the command queue semaphore
Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx = -22. Instead of waiting indefinitely for the sem, blocking flow now waits for index to be allocated or a sem acquisition timeout before beginning the timer for FW completion.
Kernel log example: mlx5_core 0000:06:00.0: wait_func_handle_exec_timeout:1128:(pid 185911): cmd[-22]: CREATE_UCTX(0xa04) No done completion
Weakness: CWE-129
Which versions are affected by CVE-2024-38556?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-38556?
Apply the vendor's patch.
Is CVE-2024-38556 being exploited?
There is no known exploitation of CVE-2024-38556 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-57841, BELL-CVE-2024-38556, DEBIAN-CVE-2024-38556, GHSA-x592-qqvv-rpr2, ROOT-OS-DEBIAN-11-CVE-2024-38556, ROOT-OS-UBUNTU-2204-CVE-2024-38556 and 1 more.