Log in Start free

Vulnerability · Published Aug 21, 2024 · Assigned by Linux

CVE-2024-43872RDMA/hns: Fix soft lockup under heavy CEQE load

High 7.5

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 67.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup under heavy CEQE load CEQEs are handled in interrupt handler currently. This may cause the CPU core staying in interrupt context too long and lead to soft lockup under heavy load. Handle CEQEs in BH workqueue and set an upper limit for the number of CEQE handled by a single call of work handler.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2024-43872
Debian:13linux6.10.3-1DEBIAN-CVE-2024-43872
Debian:14linux6.10.3-1DEBIAN-CVE-2024-43872
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38UBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38USN-8781-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2024-43872
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2024-43872
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2024-43872

Affected products (as reported)

VendorProductVersions
Linux Linux a5073d6054f75d7c94b3354206eec4b804d2fbd4 – before 97740304c953ac43aebd24678ae999fe0bc9decfa5073d6054f75d7c94b3354206eec4b804d2fbd4 – before 06580b33c183c9f98e2a2ca96a86137179032c08a5073d6054f75d7c94b3354206eec4b804d2fbd4 – before 2fdf34038369c0a27811e7b4680662a14ada1d6b
Linux Linux 4.16

References