CVE-2024-27435CWE-667

CVE-2024-27435

High · published May 17, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nvme: fix reconnection fail due to reserved tag allocation

We found a issue on production environment while using NVMe over RDMA,

admin_q reconnect failed forever while remote target and network is ok.

After dig into it, we found it may caused by a ABBA deadlock due to tag

allocation. In my case, the tag was hold by a keep alive request

waiting inside admin_q, as we quiesced admin_q while reset ctrl, so the

request maked as idle and will not process before reset success. As

fabric_q shares tagset with admin_q, while reconnect remote target, we

need a tag for connect command, but the only one reserved tag was held

by keep alive command which waiting inside admin_q. As a result, we

failed to reconnect admin_q forever. In order to fix this issue, I

think we should keep two reserved tags for admin queue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-05-17T17:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.12.1, < 6.1.836.1.83
linux/linux_kernel≥ 6.2, < 6.6.236.6.23
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
linux/linux_kernel≥ 6.8, < 6.8.26.8.2
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (10)
EPSS history
Timeline
  • 17 MAY 12:12Z
    nvme: fix reconnection fail due to reserved tag allocation
    cvelistv5