First published: Wed May 01 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent deadlock while disabling aRFS The Linux kernel CVE team has assigned <a href="https://access.redhat.com/security/cve/CVE-2024-27014">CVE-2024-27014</a> to this issue. Upstream advisory: <a href="https://lore.kernel.org/linux-cve-announce/2024050149-CVE-2024-27014-d2dc@gregkh/T">https://lore.kernel.org/linux-cve-announce/2024050149-CVE-2024-27014-d2dc@gregkh/T</a>
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel | <6.1.88 | 6.1.88 |
redhat/kernel | <6.6.29 | 6.6.29 |
redhat/kernel | <6.8.8 | 6.8.8 |
redhat/kernel | <6.9 | 6.9 |
Linux kernel | >=5.13<5.15.157 | |
Linux kernel | >=5.16<6.1.88 | |
Linux kernel | >=6.2<6.6.29 | |
Linux kernel | >=6.7<6.8.8 | |
Linux kernel | =6.9-rc1 | |
Linux kernel | =6.9-rc2 | |
Linux kernel | =6.9-rc3 | |
Linux kernel | =6.9-rc4 | |
Fedora | =38 | |
Fedora | =39 | |
Fedora | =40 | |
debian/linux | <=5.10.223-1<=5.10.226-1 | 6.1.123-1 6.1.128-1 6.12.12-1 6.12.16-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-27014 has a moderate severity rating due to issues related to deadlock in the Linux kernel's mlx5e network driver.
To fix CVE-2024-27014, update the Linux kernel to versions 6.1.88, 6.6.29, or 6.8.8, or apply any appropriate patches provided by your distribution.
CVE-2024-27014 affects several versions of the Linux kernel, specifically those below 6.1.88, 6.6.29, and 6.8.8.
Yes, CVE-2024-27014 affects specific packages in Red Hat and Debian distributions, among others.
CVE-2024-27014 primarily impacts the mlx5e driver in the Linux kernel, related to aRFS functionality.