CVE-2024-42268

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-42268
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42268.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-42268
Downstream
Related
Published
2024-08-17T08:54:23Z
Modified
2025-10-14T21:02:54.603144Z
Summary
net/mlx5: Fix missing lock on sync reset reload
Details

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix missing lock on sync reset reload

On sync reset reload work, when remote host updates devlink on reload actions performed on that host, it misses taking devlink lock before calling devlinkremotereloadactionsperformed() which results in triggering lock assert like the following:

WARNING: CPU: 4 PID: 1164 at net/devlink/core.c:261 devlassertlocked+0x3e/0x50 … CPU: 4 PID: 1164 Comm: kworker/u96:6 Tainted: G S W 6.10.0-rc2+ #116 Hardware name: Supermicro SYS-2028TP-DECTR/X10DRT-PT, BIOS 2.0 12/18/2015 Workqueue: mlx5fwresetevents mlx5syncresetreloadwork [mlx5core] RIP: 0010:devlassertlocked+0x3e/0x50 … Call Trace: <TASK> ? _warn+0xa4/0x210 ? devlassertlocked+0x3e/0x50 ? reportbug+0x160/0x280 ? handlebug+0x3f/0x80 ? excinvalidop+0x17/0x40 ? asmexcinvalidop+0x1a/0x20 ? devlassertlocked+0x3e/0x50 devlinknotify+0x88/0x2b0 ? mlx5attachdevice+0x20c/0x230 [mlx5core] ? _pfxdevlinknotify+0x10/0x10 ? processonework+0x4b6/0xbb0 processone_work+0x4b6/0xbb0 […]

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
84a433a40d0ebf3bbf36b8bfa58c6f45dc782344
Fixed
5d07d1d40aabfd61bab21115639bd4f641db6002
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
84a433a40d0ebf3bbf36b8bfa58c6f45dc782344
Fixed
98884e89c90d077f6fe6ba18e6cf6f914642f04e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
84a433a40d0ebf3bbf36b8bfa58c6f45dc782344
Fixed
091268f3c27a5b6d7858a3bb2a0dbcc9cd26ddb5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
84a433a40d0ebf3bbf36b8bfa58c6f45dc782344
Fixed
572f9caa9e7295f8c8822e4122c7ae8f1c412ff9

Affected versions

v5.*

v5.19

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.2
v6.10.3
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

{
    "vanir_signatures": [
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c",
                "function": "mlx5_fw_reset_complete_reload"
            },
            "id": "CVE-2024-42268-11d4d6de",
            "digest": {
                "length": 534.0,
                "function_hash": "57857531034205160444032347229866246498"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98884e89c90d077f6fe6ba18e6cf6f914642f04e",
            "signature_version": "v1"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c"
            },
            "id": "CVE-2024-42268-25f8d25f",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "168717814970989042424667023801057682165",
                    "137049616593910190076951174040003836201",
                    "15340648569882155234970266493050235575",
                    "204921897991262158371862972285466219527",
                    "151694173740524359518651298947649492564",
                    "264150447084997682606836082644682092084",
                    "287753503035729093958269293000545068148",
                    "307523271645099140668153680662108969524",
                    "220147456312676611869346044083842734292",
                    "327228937410587257821093229544540493170"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@572f9caa9e7295f8c8822e4122c7ae8f1c412ff9",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c",
                "function": "mlx5_fw_reset_complete_reload"
            },
            "id": "CVE-2024-42268-3e215e1e",
            "digest": {
                "length": 534.0,
                "function_hash": "57857531034205160444032347229866246498"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@091268f3c27a5b6d7858a3bb2a0dbcc9cd26ddb5",
            "signature_version": "v1"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c"
            },
            "id": "CVE-2024-42268-7a59ddc6",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "168717814970989042424667023801057682165",
                    "137049616593910190076951174040003836201",
                    "15340648569882155234970266493050235575",
                    "204921897991262158371862972285466219527",
                    "151694173740524359518651298947649492564",
                    "264150447084997682606836082644682092084",
                    "287753503035729093958269293000545068148",
                    "307523271645099140668153680662108969524",
                    "220147456312676611869346044083842734292",
                    "327228937410587257821093229544540493170"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98884e89c90d077f6fe6ba18e6cf6f914642f04e",
            "signature_version": "v1"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c"
            },
            "id": "CVE-2024-42268-813f8824",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "299304280003286976954366069795664603200",
                    "233243760896341707624810282582526452354",
                    "15340648569882155234970266493050235575",
                    "204921897991262158371862972285466219527",
                    "151694173740524359518651298947649492564",
                    "264150447084997682606836082644682092084",
                    "287753503035729093958269293000545068148",
                    "307523271645099140668153680662108969524",
                    "220147456312676611869346044083842734292",
                    "327228937410587257821093229544540493170"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d07d1d40aabfd61bab21115639bd4f641db6002",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c",
                "function": "mlx5_fw_reset_complete_reload"
            },
            "id": "CVE-2024-42268-827622e9",
            "digest": {
                "length": 505.0,
                "function_hash": "43408178605064275707021538277570418072"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5d07d1d40aabfd61bab21115639bd4f641db6002",
            "signature_version": "v1"
        },
        {
            "signature_type": "Function",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c",
                "function": "mlx5_fw_reset_complete_reload"
            },
            "id": "CVE-2024-42268-c993fdb4",
            "digest": {
                "length": 534.0,
                "function_hash": "57857531034205160444032347229866246498"
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@572f9caa9e7295f8c8822e4122c7ae8f1c412ff9",
            "signature_version": "v1"
        },
        {
            "signature_type": "Line",
            "target": {
                "file": "drivers/net/ethernet/mellanox/mlx5/core/fw_reset.c"
            },
            "id": "CVE-2024-42268-e5102d58",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "168717814970989042424667023801057682165",
                    "137049616593910190076951174040003836201",
                    "15340648569882155234970266493050235575",
                    "204921897991262158371862972285466219527",
                    "151694173740524359518651298947649492564",
                    "264150447084997682606836082644682092084",
                    "287753503035729093958269293000545068148",
                    "307523271645099140668153680662108969524",
                    "220147456312676611869346044083842734292",
                    "327228937410587257821093229544540493170"
                ]
            },
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@091268f3c27a5b6d7858a3bb2a0dbcc9cd26ddb5",
            "signature_version": "v1"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.1.104
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.45
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.4