Riskcovery

CVE-2024-26769

nvmet-fc: avoid deadlock on delete association path

State
Published
Severity
7.5 High
Published
Apr 3, 2024
Updated
Aug 5, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvmet-fc: avoid deadlock on delete association path

When deleting an association the shutdown path is deadlocking because we try to flush the nvmet_wq nested. Avoid this by deadlock by deferring the put work into its own work item.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux
3.14.4 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a07b4970f464f13640e28e16dad6cfa33647cc99 to before 5e0bc09a52b6169ce90f7ac6e195791adb16cec4Affected
  • a07b4970f464f13640e28e16dad6cfa33647cc99 to before 9e6987f8937a7bd7516aa52f25cb7e12c0c92ee8Affected
  • a07b4970f464f13640e28e16dad6cfa33647cc99 to before eaf0971fdabf2a93c1429dc6bedf3bbe85dffa30Affected
  • a07b4970f464f13640e28e16dad6cfa33647cc99 to before 1d86f79287206deec36d63b89c741cf542b6caddAffected
  • a07b4970f464f13640e28e16dad6cfa33647cc99 to before 710c69dbaccdac312e32931abcb8499c1525d397Affected
LinuxLinux
  • 4.8Affected
  • before 4.8Not affected
  • 5.15.150 through 5.15.*Not affected
  • 6.1.80 through 6.1.*Not affected
  • 6.6.19 through 6.6.*Not affected
  • 6.7.7 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.