CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix error path in multi-packet WQE transmit
Remove the erroneous unmap in case no DMA mapping was established
The multi-packet WQE transmit code attempts to obtain a DMA mapping for the skb. This could fail, e.g. under memory pressure, when the IOMMU driver just can't allocate more memory for page tables. While the code tries to handle this in the path below the errunmap label it erroneously unmaps one entry from the sq's FIFO list of active mappings. Since the current map attempt failed this unmap is removing some random DMA mapping that might still be required. If the PCI function now presents that IOVA, the IOMMU may assumes a rogue DMA access and e.g. on s390 puts the PCI function in error state.
The erroneous behavior was seen in a stress-test environment that created memory pressure.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50001?
CVE-2024-50001 has been classified with a severity rating that indicates it poses a risk to affected systems, particularly in the Linux kernel.
How do I fix CVE-2024-50001?
To remediate CVE-2024-50001, users should apply the latest patches or updates provided for the affected versions of the Linux kernel.
Which Linux kernel versions are affected by CVE-2024-50001?
CVE-2024-50001 affects multiple versions of the Linux kernel ranging from 5.10 to 6.12-rc1.
What systems are impacted by CVE-2024-50001?
Systems running the specified vulnerable Linux kernel versions are impacted by CVE-2024-50001.
Is there a workaround for CVE-2024-50001?
While applying official patches is recommended, temporary workarounds may involve disabling certain kernel features related to multi-packet WQE transmit.