CVE-2024-45019

net/mlx5e: Take state lock during tx timeout reporter

State: Published
Severity: 7.8 High
Published: Sep 11, 2024
Updated: Aug 5, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Take state lock during tx timeout reporter

mlx5e_safe_reopen_channels() requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another issue. This patch adds it back but at a later point (when calling mlx5e_safe_reopen_channels()) to avoid the deadlock referenced in the Fixes tag.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	514232495aa523641febaa58b687fe6df1cd0b73 to before 03d3734bd692affe4d0e9c9d638f491aaf37411bAffected 8ce3d969348a7c7fa3469588eb1319f9f3cc0eaa to before b3b9a87adee97854bcd71057901d46943076267eAffected eab0da38912ebdad922ed0388209f7eb0a5163cd to before 8e57e66ecbdd2fddc9fbf3e984b1c523b70e9809Affected eab0da38912ebdad922ed0388209f7eb0a5163cd to before e6b5afd30b99b43682a7764e1a74a42fe4d5f4b3Affected 6.1.69 to before 6.1.107Affected 6.6.8 to before 6.6.48Affected
LinuxLinux	6.7Affected before 6.7Not affected 6.1.107 through 6.1.Not affected 6.6.48 through 6.6.Not affected 6.10.7 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

514232495aa523641febaa58b687fe6df1cd0b73 to before 03d3734bd692affe4d0e9c9d638f491aaf37411bAffected
8ce3d969348a7c7fa3469588eb1319f9f3cc0eaa to before b3b9a87adee97854bcd71057901d46943076267eAffected
eab0da38912ebdad922ed0388209f7eb0a5163cd to before 8e57e66ecbdd2fddc9fbf3e984b1c523b70e9809Affected
eab0da38912ebdad922ed0388209f7eb0a5163cd to before e6b5afd30b99b43682a7764e1a74a42fe4d5f4b3Affected
6.1.69 to before 6.1.107Affected
6.6.8 to before 6.6.48Affected

LinuxLinux

6.7Affected
before 6.7Not affected
6.1.107 through 6.1.*Not affected
6.6.48 through 6.6.*Not affected
6.10.7 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.