CVE-2024-43872CWE-667

CVE-2024-43872

High · published August 21, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/hns: Fix soft lockup under heavy CEQE load

CEQEs are handled in interrupt handler currently. This may cause the

CPU core staying in interrupt context too long and lead to soft lockup

under heavy load.

Handle CEQEs in BH workqueue and set an upper limit for the number of

CEQE handled by a single call of work handler.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.2th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-08-21T05:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 4.16, < 6.10.36.10.3
References (2)
EPSS history
Timeline
  • 21 AUG 00:06Z
    RDMA/hns: Fix soft lockup under heavy CEQE load
    cvelistv5