Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.7

CVE-2024-53100: Linux kernel NVMe‑TCP can trigger warning crash

CVE-2024-53100 · published 1 year ago
Summary

The Linux kernel’s NVMe‑TCP component could hit a warning that may disrupt services when a lock is released while still in use. This issue appears in standard Linux kernel builds used by many distributions. Updating the kernel to the latest patched version resolves the problem.

What to do
  • Update debian rootio-linux to version 5.10.247-1.root.io.42.
  • Update debian linux to version 6.1.119-1.
  • Update debian linux to version 6.11.9-1.
  • Update canonical linux-aws-6.8 to version 6.8.0-1027.29~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1027.32~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1028.30~22.04.1.
  • Update canonical linux-hwe-6.8 to version 6.8.0-58.60~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1024.24~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-58.60.1~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1026.29~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1024.25~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-58.60.1~22.04.1.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1020.21~22.04.1.
  • Update canonical linux to version 6.8.0-58.60.
  • Update canonical linux-aws to version 6.8.0-1027.29.
  • Update canonical linux-azure to version 6.8.0-1027.32.
  • Update canonical linux-azure-6.11 to version 6.11.0-1012.12~24.04.1.
  • Update canonical linux-azure-nvidia to version 6.8.0-1014.15.
  • Update canonical linux-gcp to version 6.8.0-1028.30.
  • Update canonical linux-gcp-6.11 to version 6.11.0-1011.11~24.04.1.
  • Update canonical linux-gke to version 6.8.0-1023.27.
  • Update canonical linux-gkeop to version 6.8.0-1010.12.
  • Update canonical linux-ibm to version 6.8.0-1024.24.
  • Update canonical linux-lowlatency to version 6.8.0-58.60.1.
  • Update canonical linux-nvidia to version 6.8.0-1026.29.
  • Update canonical linux-nvidia-6.11 to version 6.11.0-1007.7.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1026.29.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1008.8.
  • Update canonical linux-oem-6.11 to version 6.11.0-1015.15.
  • Update canonical linux-oem-6.8 to version 6.8.0-1026.26.
  • Update canonical linux-oracle to version 6.8.0-1024.25.
  • Update canonical linux-raspi to version 6.8.0-1028.32.
  • Update canonical linux-riscv to version 6.8.0-58.60.1.
  • Update canonical linux-xilinx to version 6.8.0-1017.18.
  • Update canonical linux-raspi-realtime to version 6.8.0-2023.24.
  • Update canonical linux-realtime to version 6.8.1-1020.21.
  • Update canonical linux-fips to version 6.8.0-78.78+fips1.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update linux kernel to version 6.11.9.
  • Update linux to version 5.15.0-202.212.aikido.118.
  • Update rootio-linux to version 5.15.0-202.212.aikido.118.
  • Update linux linux to version 4f946479b326a3cbb193f2b8368aed9269514c35 or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux < 4f946479b326a3cbb193f2b8368aed9269514c35
5.0
– linux linux_kernel < 6.1.118
>= 6.2, < 6.6.62
>= 6.7, < 6.11.9
6.12
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Root:Debian:11 debian rootio-linux < 5.10.247-1.root.io.42
Fix: upgrade to 5.10.247-1.root.io.42
Debian:12 debian linux < 6.1.119-1
Fix: upgrade to 6.1.119-1
Debian:13 debian linux < 6.11.9-1
Fix: upgrade to 6.11.9-1
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Showing 50 of 119. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1027.29~22.04.1
Fix: upgrade to 6.8.0-1027.29~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1027.32~22.04.1
Fix: upgrade to 6.8.0-1027.32~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1028.30~22.04.1
Fix: upgrade to 6.8.0-1028.30~22.04.1
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-58.60~22.04.1
Fix: upgrade to 6.8.0-58.60~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1024.24~22.04.1
Fix: upgrade to 6.8.0-1024.24~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-58.60.1~22.04.1
Fix: upgrade to 6.8.0-58.60.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1026.29~22.04.1
Fix: upgrade to 6.8.0-1026.29~22.04.1
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1024.25~22.04.1
Fix: upgrade to 6.8.0-1024.25~22.04.1
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-58.60.1~22.04.1
Fix: upgrade to 6.8.0-58.60.1~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1020.21~22.04.1
Fix: upgrade to 6.8.1-1020.21~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-58.60
Fix: upgrade to 6.8.0-58.60
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1027.29
Fix: upgrade to 6.8.0-1027.29
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1027.32
Fix: upgrade to 6.8.0-1027.32
Ubuntu:24.04:LTS canonical linux-azure-6.11 < 6.11.0-1012.12~24.04.1
Fix: upgrade to 6.11.0-1012.12~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-nvidia < 6.8.0-1014.15
Fix: upgrade to 6.8.0-1014.15
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1028.30
Fix: upgrade to 6.8.0-1028.30
Ubuntu:24.04:LTS canonical linux-gcp-6.11 < 6.11.0-1011.11~24.04.1
Fix: upgrade to 6.11.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1023.27
Fix: upgrade to 6.8.0-1023.27
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1010.12
Fix: upgrade to 6.8.0-1010.12
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1024.24
Fix: upgrade to 6.8.0-1024.24
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-58.60.1
Fix: upgrade to 6.8.0-58.60.1
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1026.29
Fix: upgrade to 6.8.0-1026.29
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 < 6.11.0-1007.7
Fix: upgrade to 6.11.0-1007.7
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1026.29.1
Fix: upgrade to 6.8.0-1026.29.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-oem-6.11 < 6.11.0-1015.15
Fix: upgrade to 6.11.0-1015.15
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1026.26
Fix: upgrade to 6.8.0-1026.26
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1024.25
Fix: upgrade to 6.8.0-1024.25
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1028.32
Fix: upgrade to 6.8.0-1028.32
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-58.60.1
Fix: upgrade to 6.8.0-58.60.1
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1017.18
Fix: upgrade to 6.8.0-1017.18
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2023.24
Fix: upgrade to 6.8.0-2023.24
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1020.21
Fix: upgrade to 6.8.1-1020.21
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-78.78+fips1
Fix: upgrade to 6.8.0-78.78+fips1
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Linux linux kernel >= 6.7.0, < 6.11.9
Fix: upgrade to 6.11.9
Original advisory text
CVE-2024-53100 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: nvme: tcp: avoid race between queue_lock lock and destroy Commit 76d54bf20cdc ("nvme-tcp: don't access released socket during error recovery") added a mutex_lock() call for the queue->queue_lock in nvme_tcp_get_address(). However, the mutex_lock() races with mutex_destroy() in nvme_tcp_free_queue(), and causes the WARN below. DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 3 PID: 34077 at kernel/locking/mutex.c:587 __mutex_lock+0xcf0/0x1220 Modules linked in: nvmet_tcp nvmet nvme_tcp nvme_fabrics iw_cm ib_cm ib_core pktcdvd nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables qrtr sunrpc ppdev 9pnet_virtio 9pnet pcspkr netfs parport_pc parport e1000 i2c_piix4 i2c_smbus loop fuse nfnetlink zram bochs drm_vram_helper drm_ttm_helper ttm drm_kms_helper xfs drm sym53c8xx floppy nvme scsi_transport_spi nvme_core nvme_auth serio_raw ata_generic pata_acpi dm_multipath qemu_fw_cfg [last unloaded: ib_uverbs] CPU: 3 UID: 0 PID: 34077 Comm: udisksd Not tainted 6.11.0-rc7 #319 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:__mutex_lock+0xcf0/0x1220 Code: 08 84 d2 0f 85 c8 04 00 00 8b 15 ef b6 c8 01 85 d2 0f 85 78 f4 ff ff 48 c7 c6 20 93 ee af 48 c7 c7 60 91 ee af e8 f0 a7 6d fd <0f> 0b e9 5e f4 ff ff 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 RSP: 0018:ffff88811305f760 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88812c652058 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 RBP: ffff88811305f8b0 R08: 0000000000000001 R09: ffffed1075c36341 R10: ffff8883ae1b1a0b R11: 0000000000010498 R12: 0000000000000000 R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88812c652058 FS: 00007f9713ae4980(0000) GS:ffff8883ae180000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fcd78483c7c CR3: 0000000122c38000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __warn.cold+0x5b/0x1af ? __mutex_lock+0xcf0/0x1220 ? report_bug+0x1ec/0x390 ? handle_bug+0x3c/0x80 ? exc_invalid_op+0x13/0x40 ? asm_exc_invalid_op+0x16/0x20 ? __mutex_lock+0xcf0/0x1220 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx___mutex_lock+0x10/0x10 ? __lock_acquire+0xd6a/0x59e0 ? nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] nvme_tcp_get_address+0xc2/0x1e0 [nvme_tcp] ? __pfx_nvme_tcp_get_address+0x10/0x10 [nvme_tcp] nvme_sysfs_show_address+0x81/0xc0 [nvme_core] dev_attr_show+0x42/0x80 ? __asan_memset+0x1f/0x40 sysfs_kf_seq_show+0x1f0/0x370 seq_read_iter+0x2cb/0x1130 ? rw_verify_area+0x3b1/0x590 ? __mutex_lock+0x433/0x1220 vfs_read+0x6a6/0xa20 ? lockdep_hardirqs_on+0x78/0x100 ? __pfx_vfs_read+0x10/0x10 ksys_read+0xf7/0x1d0 ? __pfx_ksys_read+0x10/0x10 ? __x64_sys_openat+0x105/0x1d0 do_syscall_64+0x93/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? __pfx_ksys_read+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on_prepare+0x16d/0x400 ? do_syscall_64+0x9f/0x180 ? lockdep_hardirqs_on+0x78/0x100 ? do_syscall_64+0x9f/0x180 ? do_syscall_64+0x9f/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f9713f55cfa Code: 55 48 89 e5 48 83 ec 20 48 89 55 e8 48 89 75 f0 89 7d f8 e8 e8 74 f8 ff 48 8b 55 e8 48 8b 75 f0 4 ---truncated---
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.7 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-362Race Condition
Timeline
Published25 Nov 2024
Updated2 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta