Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-43866

HistoryAug 21, 2024 - 12:15 a.m.

CVE-2024-43866

2024-08-2100:15:05

Debian Security Bug Tracker

security-tracker.debian.org

cve-2024-43866

linux kernel

vulnerability

net/mlx5

shutdown callback

device shutdown

null pointer access

recovery

drain health wq

unix

AI Score

Confidence

High

EPSS

Percentile

16.4%

JSON

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callback.

OSVersionArchitecturePackageVersionFilename
Debian12alllinux<= 6.1.106-3linux_6.1.106-3_all.deb
Debian11alllinux<= 5.10.223-1linux_5.10.223-1_all.deb
Debian999alllinux< 6.10.4-1linux_6.10.4-1_all.deb
Debian13alllinux< 6.10.4-1linux_6.10.4-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	<= 6.1.106-3	linux_6.1.106-3_all.deb
Debian	11	all	linux	<= 5.10.223-1	linux_5.10.223-1_all.deb
Debian	999	all	linux	< 6.10.4-1	linux_6.10.4-1_all.deb
Debian	13	all	linux	< 6.10.4-1	linux_6.10.4-1_all.deb