CVE-2024-27435
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
nvme: fix reconnection fail due to reserved tag allocation
In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due to reserved tag allocation We found a issue on production environment while using NVMe over RDMA, admin_q reconnect failed forever while remote target and network is ok. After dig into it, we found it may caused by a ABBA deadlock due to tag allocation. In my case, the tag was hold by a keep alive request waiting inside admin_q, as we quiesced admin_q while reset ctrl, so the request maked as idle and will not process before reset success. As fabric_q shares tagset with admin_q, while reconnect remote target, we need a tag for connect command, but the only one reserved tag was held by keep alive command which waiting inside admin_q. As a result, we failed to reconnect admin_q forever. In order to fix this issue, I think we should keep two reserved tags for admin queue.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| ed01fee283a067c72b2d6500046080dbc1bb9dae | affected | git | 149afee5c7418ec5db9d7387b9c9a5c1eb7ea2a8 | Unavailable | None listed |
| ed01fee283a067c72b2d6500046080dbc1bb9dae | affected | git | ff2f90f88d78559802466ad1c84ac5bda4416b3a | Unavailable | None listed |
| ed01fee283a067c72b2d6500046080dbc1bb9dae | affected | git | 6851778504cdb49431809b4ba061903d5f592c96 | Unavailable | None listed |
| ed01fee283a067c72b2d6500046080dbc1bb9dae | affected | git | 262da920896e2f2ab0e3947d9dbee0aa09045818 | Unavailable | None listed |
| ed01fee283a067c72b2d6500046080dbc1bb9dae | affected | git | de105068fead55ed5c07ade75e9c8e7f86a00d1d | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.12 | Unavailable | None listed |
| 6.1.83 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.23 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.7.11 | unaffected | semver | Unavailable | 6.7.* | None listed |
| 6.8.2 | unaffected | semver | Unavailable | 6.8.* | None listed |
| 6.9 | unaffected | original_commit_for_fix | Unavailable | * | None listed |