CVE-2024-43866

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Always drain health in shutdown callback

There is no point in recovery during device shutdown. if health work started need to wait for it to avoid races and NULL pointer access.

Hence, drain health WQ on shutdown callback.

Red Hat rates this vulnerability as Moderate because it requires root privileges or physical hardware interactions during system shutdown, limiting the blast radius to a local denial of service. The issue affects systems utilizing Mellanox ConnectX adapters driven by the mlx5_core kernel module. Because the race condition manifests exclusively during device shutdown or unbind procedures, standard network operations remain unaffected and the flaw cannot be triggered remotely.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.