CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command
In the Linux kernel, the following vulnerability has been resolved:
nvme-fabrics: use reserved tag for reg read/write command
In some scenarios, if too many commands are issued by nvme command in the same time by user tasks, this may exhaust all tags of adminq. If a reset (nvme reset or IO timeout) occurs before these commands finish, reconnect routine may fail to update nvme regs due to insufficient tags, which will cause kernel hang forever. In order to workaround this issue, maybe we can let regread32()/regread64()/regwrite32() use reserved tags. This maybe safe for nvmf:
1. For the disable ctrl path, we will not issue connect command 2. For the enable ctrl / fw activate path, since connect and regxx() are called serially.
So the reserved tags may still be enough while regxx() use reserved tags.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.11 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch nvme-fabrics: use reserved tag for reg read/write command
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41082?
CVE-2024-41082 has a high severity rating due to the potential for command exhaustion in the admin queue.
How do I fix CVE-2024-41082?
To remediate CVE-2024-41082, update to kernel version 6.9.11 or 6.10 for Red Hat systems, or to versions 6.12.11-1 or 6.12.12-1 for Debian systems.
What systems are affected by CVE-2024-41082?
CVE-2024-41082 affects Linux kernel versions prior to the fixed versions specified for Red Hat and Debian distributions.
What is the nature of CVE-2024-41082 vulnerability?
CVE-2024-41082 is a concurrent command issue in the Linux kernel that can lead to the exhaustion of the admin queue tags due to excessive command issuance.
Can CVE-2024-41082 lead to a denial of service?
Yes, CVE-2024-41082 can potentially lead to a denial of service condition if the command tags are exhausted.