net/mlx5: Always drain health in shutdown callback (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.16 % · percentile 6 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always drain health in shutdown callback There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access. Hence, drain health WQ on shutdown callback.
Weaknesses (CWE)
- CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization
- CWE-476 — NULL Pointer Dereference
References
- https://git.kernel.org/stable/c/5005e2e159b300c1b8c6820a1e13a62eb0127b9b
- https://git.kernel.org/stable/c/6b6c2ebd83f2bf97e8f221479372aaca97a4a9b2
- https://git.kernel.org/stable/c/6048dec754554a1303d632be6042d3feb3295285
- https://git.kernel.org/stable/c/1b75da22ed1e6171e261bc9265370162553d5393
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 4.7 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2024-40516
- GCVE · GCVE-0-2024-43866
CERT-FR advisories
- CERTFR-2026-AVI-0326 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0316 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0022 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0002 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2024-AVI-1080 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0840 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0822 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0800 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0779 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.13.16 < 6.1.113cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.45cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.10.4cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected d2aa060d40fa060e963f9a356d43481e43ba3dac < 5005e2e159b300c1b8c6820a1e13a62eb0127b9b ; affected d2aa060d40fa060e963f9a356d43481e43ba3dac < 6b6c2ebd83f2bf97e8f221479372aaca97a4a9b2 ; affected d2aa060d40fa060e963f9a356d43481e43ba3dac < 6048dec754554a1303d632be6042d3feb3295285 ; affected d2aa060d40fa060e963f9a356d43481e43ba3dac < 1b75da22ed1e6171e261bc9265370162553d5393 ; affected 63d10e93df94c93bdeac87a9401696b1edadb7ed ; affected 4.13.16 < 4.14 |
| Linux · Linux | affected 4.14 ; unaffected 0 < 4.14 ; unaffected 6.1.113 ≤ 6.1.* ; unaffected 6.6.45 ≤ 6.6.* ; unaffected 6.10.4 ≤ 6.10.* ; unaffected 6.11 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |