vulnti.work

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal…

High CVSS 7.0
CVECVE-2024-38555
First seen2026-08-04 20:30 UTC
Disclosed2024-06-19 14:15 UTC
Last updated2026-08-04 20:30 UTC
Channel statusauto

Summary

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal error state. Avoid calling completion handler in this case, since the device will flush the command interface and trigger all completions manually. Kernel log: ------------[ cut here ]------------ refcount_t: underflow; use-after-free. ... RIP: 0010:refcount_warn_saturate+0xd8/0xe0 ... Call Trace:…

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD