CVE-2024-26846

nvme-fc: do not wait in vain when unloading module

MEDIUM
4.4
CVSS Score
Published: April 17, 2024 at 10:10 AM UTC
Updated: June 17, 2026 at 07:18 AM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM4.4
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: do not wait in vain when unloading module The module exit path has race between deleting all controllers and freeing 'left over IDs'. To prevent double free a synchronization between nvme_delete_ctrl and ida_destroy has been added by the initial commit. There is some logic around trying to prevent from hanging forever in wait_for_completion, though it does not handling all cases. E.g. blktests is able to reproduce the situation where the module unload hangs forever. If we completely rely on the cleanup code executed from the nvme_delete_ctrl path, all IDs will be freed eventually. This makes calling ida_destroy unnecessary. We only have to ensure that all nvme_delete_ctrl code has been executed before we leave nvme_fc_exit_module. This is done by flushing the nvme_delete_wq workqueue. While at it, remove the unused nvme_fc_wq workqueue too.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.10.2115.11 ≤ v < 5.15.1505.16 ≤ v < 6.1.805.3 ≤ v < 5.10.2115.3 ≤ v < 5.15.1505.3 ≤ v < 6.1.805.3 ≤ v < 6.6.195.3 ≤ v < 6.7.75.3 ≤ v < 6.86.2 ≤ v < 6.6.196.7 ≤ v < 6.7.74c73cbdff1119d088ed16d63def59ad32b11b18f6.8 rc16.8 rc2
Vendor states this is fixed in 085195aa90a924c79e35569bcdad860d764a8e17 (fixed)
Vendor states this is fixed in 0bf567d6d9ffe09e059bbdfb4d07143cef42c75c (fixed)
Vendor states this is fixed in 4f2c95015ec2a1899161be6c0bdaecedd5a7bfb2 (fixed)
Vendor states this is fixed in 70fbfc47a392b98e5f8dba70c6efc6839205c982 (fixed)
Vendor states this is fixed in baa6b7eb8c66486bd64608adc63fe03b30d3c0b9 (fixed)
Vendor states this is fixed in c0882c366418bf9c19e1ba7f270fe377a9bf5d67 (fixed)
Vendor states this is fixed in 5.10.211 (unaffected)
Vendor states this is fixed in 5.15.150 (unaffected)
Vendor states this is fixed in 5.3 (unaffected)
Vendor states this is fixed in 6.1.80 (unaffected)
Vendor states this is fixed in 6.6.19 (unaffected)
Vendor states this is fixed in 6.7.7 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/085195aa90a924c79e35569bcdad860d764a8e17
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0bf567d6d9ffe09e059bbdfb4d07143cef42c75c
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4f2c95015ec2a1899161be6c0bdaecedd5a7bfb2
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/70fbfc47a392b98e5f8dba70c6efc6839205c982
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/baa6b7eb8c66486bd64608adc63fe03b30d3c0b9
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c0882c366418bf9c19e1ba7f270fe377a9bf5d67
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

4.4MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-415

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card