CVE-2024-40906 net/mlx5: Always stop health timer during driver removal

🗓️ 12 Jul 2024 12:20:46Reported by GoogleType

osv🔗 osv.dev👁 17 Views

In Linux kernel, vulnerability CVE-2024-40906, potential UAF bug due to missing health timer stop on driver removal, leading to page fault Oop

Reporter	Title	Published	Views	Family All 132
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities.	9 Jun 202516:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	19 Jun 202516:11	–	ibm
Tenable Nessus	AlmaLinux 8 : kernel (ALSA-2025:8056)	21 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : kernel-rt (ALSA-2025:8057)	21 May 202500:00	–	nessus
Tenable Nessus	Debian dla-4008 : linux-config-6.1 - security update	3 Jan 202500:00	–	nessus
Tenable Nessus	Debian dsa-5731 : affs-modules-6.1.0-21-4kc-malta-di - security update	16 Jul 202400:00	–	nessus
Tenable Nessus	MiracleLinux 9 : kernel-5.14.0-503.11.1.el9_5 (AXSA:2025-9528:03)	20 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : kernel-4.18.0-553.53.1.el8_10 (AXSA:2025-9967:33)	13 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2025-0118)	25 Jul 202500:00	–	nessus
Tenable Nessus	Oracle Linux 9 : kernel (ELSA-2024-9315)	19 Nov 202400:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/6ccada6ffb42e0ac75e3db06d41baf5a7f483f8a
git	www.git.kernel.org/stable/c/c8b3f38d2dae0397944814d691a419c451f9906f
git	www.git.kernel.org/stable/c/e6777ae0bf6fd5bc626bb051c8c93e3c8198a3f8
git	www.git.kernel.org/stable/c/e7d4485d47839f4d1284592ae242c4e65b2810a9
lists	www.lists.debian.org/debian-lts-announce/2025/01/msg00001.html
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40906.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-40906
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

08 Jul 2026 07:22Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.8

EPSS0.00283

SSVC