NVD Vulnerability Detail

CVE-2024-45019

Summary	In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout reporter mlx5e_safe_reopen_channels() requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another issue. This patch adds it back but at a later point (when calling mlx5e_safe_reopen_channels()) to avoid the deadlock referenced in the Fixes tag.
Publication Date	Sept. 12, 2024, 1:15 a.m.
Registration Date	Sept. 12, 2024, 5 a.m.
Last Update	Sept. 14, 2024, 1:36 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/03d3734bd692affe4d0e9c9d638f491aaf37411b	Patch
2	https://git.kernel.org/stable/c/b3b9a87adee97854bcd71057901d46943076267e	Patch
3	https://git.kernel.org/stable/c/8e57e66ecbdd2fddc9fbf3e984b1c523b70e9809	Patch
4	https://git.kernel.org/stable/c/e6b5afd30b99b43682a7764e1a74a42fe4d5f4b3	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-667	不適切なロック	https://cwe.mitre.org/data/definitions/667.html

JVN Vulnerability Information

Linux の Linux Kernel におけるリソースのロックに関する脆弱性

Title	Linux の Linux Kernel におけるリソースのロックに関する脆弱性
Summary	Linux の Linux Kernel には、リソースのロックに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Aug. 9, 2024, midnight
Registration Date	Sept. 17, 2024, 2:47 p.m.
Last Update	Sept. 17, 2024, 2:47 p.m.

Affected System

Linux

Linux Kernel 6.1.69 以上 6.1.107 未満

Linux Kernel 6.11

Linux Kernel 6.6.8 以上 6.6.48 未満

Linux Kernel 6.7 以上 6.10.7 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-45019	https://www.cve.org/CVERecord?id=CVE-2024-45019
National Vulnerability Database (NVD)
2	CVE-2024-45019	https://nvd.nist.gov/vuln/detail/CVE-2024-45019

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-667	http://cwe.mitre.org/data/definitions/667.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	net/mlx5e: Take state lock during tx timeout reporter (03d3734)	https://git.kernel.org/stable/c/03d3734bd692affe4d0e9c9d638f491aaf37411b
2	net/mlx5e: Take state lock during tx timeout reporter (8e57e66)	https://git.kernel.org/stable/c/8e57e66ecbdd2fddc9fbf3e984b1c523b70e9809
3	net/mlx5e: Take state lock during tx timeout reporter (b3b9a87)	https://git.kernel.org/stable/c/b3b9a87adee97854bcd71057901d46943076267e
4	net/mlx5e: Take state lock during tx timeout reporter (e6b5afd)	https://git.kernel.org/stable/c/e6b5afd30b99b43682a7764e1a74a42fe4d5f4b3
Linux Kernel
5	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年09月17日] 掲載	Sept. 17, 2024, 2:47 p.m.