CVE-2024-53093: nvme-multipath: defer partition scanning
In the Linux kernel, the following vulnerability has been resolved:
nvme-multipath: defer partition scanning
We need to suppress the partition scan from occuring within the controller's scanwork context. If a path error occurs here, the IO will wait until a path becomes available or all paths are torn down, but that action also occurs within scanwork, so it would deadlock. Defer the partion scan to a different context that does not block scanwork.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.64.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53093?
CVE-2024-53093 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-53093?
To mitigate the effects of CVE-2024-53093, users should update their Linux kernel to version 6.1.119 or later.
Which versions of Linux kernel are affected by CVE-2024-53093?
CVE-2024-53093 affects Linux kernel versions up to 6.1.118 and from 6.2 to 6.6.62, including multiple release candidates.
What is the impact of CVE-2024-53093 on system performance?
The vulnerability can cause IO operations to wait indefinitely for path availability, potentially degrading system performance during path errors.
Is there a workaround for CVE-2024-53093 if I cannot update my kernel?
There are no documented workarounds for CVE-2024-53093, and updating the kernel is the recommended action.