CVE-2024-45019

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-45019
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-45019.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-45019
Downstream
Related
Published
2024-09-11T15:13:53Z
Modified
2025-10-17T11:29:38.570626Z
Summary
net/mlx5e: Take state lock during tx timeout reporter
Details

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Take state lock during tx timeout reporter

mlx5esafereopenchannels() requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another issue. This patch adds it back but at a later point (when calling mlx5esafereopenchannels()) to avoid the deadlock referenced in the Fixes tag.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
514232495aa523641febaa58b687fe6df1cd0b73
Fixed
03d3734bd692affe4d0e9c9d638f491aaf37411b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8ce3d969348a7c7fa3469588eb1319f9f3cc0eaa
Fixed
b3b9a87adee97854bcd71057901d46943076267e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
eab0da38912ebdad922ed0388209f7eb0a5163cd
Fixed
8e57e66ecbdd2fddc9fbf3e984b1c523b70e9809
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
eab0da38912ebdad922ed0388209f7eb0a5163cd
Fixed
e6b5afd30b99b43682a7764e1a74a42fe4d5f4b3

Affected versions

v6.*

v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.104
v6.1.105
v6.1.106
v6.1.69
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.2
v6.10.3
v6.10.4
v6.10.5
v6.10.6
v6.11-rc1
v6.11-rc2
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.8
v6.6.9
v6.7
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2024-45019-9abdb45c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c",
            "function": "mlx5e_tx_reporter_timeout_recover"
        },
        "digest": {
            "function_hash": "10674886409508697748770716642554550399",
            "length": 586.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3b9a87adee97854bcd71057901d46943076267e"
    },
    {
        "id": "CVE-2024-45019-aed3c6b5",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c",
            "function": "mlx5e_tx_reporter_timeout_recover"
        },
        "digest": {
            "function_hash": "10674886409508697748770716642554550399",
            "length": 586.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03d3734bd692affe4d0e9c9d638f491aaf37411b"
    },
    {
        "id": "CVE-2024-45019-b2f17040",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c",
            "function": "mlx5e_tx_reporter_timeout_recover"
        },
        "digest": {
            "function_hash": "10674886409508697748770716642554550399",
            "length": 586.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6b5afd30b99b43682a7764e1a74a42fe4d5f4b3"
    },
    {
        "id": "CVE-2024-45019-be7f3e62",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c",
            "function": "mlx5e_tx_reporter_timeout_recover"
        },
        "digest": {
            "function_hash": "10674886409508697748770716642554550399",
            "length": 586.0
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e57e66ecbdd2fddc9fbf3e984b1c523b70e9809"
    },
    {
        "id": "CVE-2024-45019-c5570e66",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c"
        },
        "digest": {
            "line_hashes": [
                "40822444675374042071742756526332933362",
                "193913045297758689080883144145633810569",
                "272603574170226136524536903062304641141",
                "3086879814718050036531704366162311142"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03d3734bd692affe4d0e9c9d638f491aaf37411b"
    },
    {
        "id": "CVE-2024-45019-caf6e1d3",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c"
        },
        "digest": {
            "line_hashes": [
                "40822444675374042071742756526332933362",
                "193913045297758689080883144145633810569",
                "272603574170226136524536903062304641141",
                "3086879814718050036531704366162311142"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3b9a87adee97854bcd71057901d46943076267e"
    },
    {
        "id": "CVE-2024-45019-d85e92b9",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c"
        },
        "digest": {
            "line_hashes": [
                "40822444675374042071742756526332933362",
                "193913045297758689080883144145633810569",
                "272603574170226136524536903062304641141",
                "3086879814718050036531704366162311142"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e57e66ecbdd2fddc9fbf3e984b1c523b70e9809"
    },
    {
        "id": "CVE-2024-45019-fd0fc714",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c"
        },
        "digest": {
            "line_hashes": [
                "40822444675374042071742756526332933362",
                "193913045297758689080883144145633810569",
                "272603574170226136524536903062304641141",
                "3086879814718050036531704366162311142"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6b5afd30b99b43682a7764e1a74a42fe4d5f4b3"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.107
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.48
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.7