CVE-2024-45019: net/mlx5e: Take state lock during tx timeout reporter
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Take state lock during tx timeout reporter
mlx5esafereopenchannels() requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another issue. This patch adds it back but at a later point (when calling mlx5esafereopenchannels()) to avoid the deadlock referenced in the Fixes tag.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45019?
CVE-2024-45019 has a moderate severity due to its impact on the Linux kernel networking stack.
How do I fix CVE-2024-45019?
To fix CVE-2024-45019, update to the patched versions of the Linux kernel, such as 5.10.223-1 or 6.12.11-1.
What versions of the Linux kernel are affected by CVE-2024-45019?
CVE-2024-45019 affects Linux kernel versions ranging from 6.1.69 to 6.1.107, as well as specific release candidates.
Is CVE-2024-45019 being actively exploited?
As of now, there is no indication that CVE-2024-45019 is being actively exploited in the wild.
What components of the Linux kernel are impacted by CVE-2024-45019?
CVE-2024-45019 affects the mlx5e networking driver in the Linux kernel.