CVE-2024-41082

A flaw was found in the Linux kernel's NVMe over Fabrics (nvme-fabrics) subsystem. When user tasks issue a large volume of concurrent commands, available command tags in the administrator queue can become exhausted. If a device reset or I/O timeout occurs while these commands are pending, the reconnection routine fails to update controller registers due to tag starvation. This flaw allows a local user to cause an unrecoverable kernel hang, resulting in a Denial of Service (DoS).

Following issue marked as moderate with "not affected or will not fix" for Red Hat Enterprise Linux, as it is not vulnerable to this CVE. This is because the CVE does not impact the versions or configurations of the Linux kernel used in Red Hat's distributions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.