CVE-2024-38556

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-38556
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-38556.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-38556
Downstream
Related
Published
2024-06-19T13:35:26.753Z
Modified
2025-11-28T02:35:16.953354Z
Summary
net/mlx5: Add a timeout to acquire the command queue semaphore
Details

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Add a timeout to acquire the command queue semaphore

Prevent forced completion handling on an entry that has not yet been assigned an index, causing an out of bounds access on idx = -22. Instead of waiting indefinitely for the sem, blocking flow now waits for index to be allocated or a sem acquisition timeout before beginning the timer for FW completion.

Kernel log example: mlx5core 0000:06:00.0: waitfunchandleexectimeout:1128:(pid 185911): cmd[-22]: CREATEUCTX(0xa04) No done completion

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38556.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8e715cd613a1e872b9d918e912d90b399785761a
Fixed
4baae687a20ef2b82fde12de3c04461e6f2521d6
Fixed
f9caccdd42e999b74303c9b0643300073ed5d319
Fixed
2d0962d05c93de391ce85f6e764df895f47c8918
Fixed
94024332a129c6e4275569d85c0c1bfb2ae2d71b
Fixed
485d65e1357123a697c591a5aeb773994b247ad7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
74dd45122b84479eee50bd0956ae8bc5799c9f8a
Last affected
e801f81cee3c8901f52ee48c6329802b28fbb49c
Last affected
d73d81447c6651904dd4a9e3fd88651ff174c1b7
Last affected
4646175c19fd019b773444a11ff62748eb83745b

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
6.1.93
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.33
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.12
Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.9.3