CVE-2024-50135

A flaw was found in the Linux kernel's NVMe PCI driver. A race condition occurs between the nvme_dev_disable() and nvme_pci_update_nr_queues() functions during device reset. This can lead to invalid values being passed to the hardware queue update function, resulting in a kernel crash and a Denial of Service (DoS) for the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the nvme kernel module from loading. This can be achieved by creating a blacklist entry.

1. Create a file /etc/modprobe.d/blacklist-nvme.conf with the following content:

   blacklist nvme
   

2. Regenerate the initramfs:

   dracut -f -v
   

3. Reboot the system for the changes to take effect.

   reboot
   

Warning: Blacklisting the nvme module will disable all NVMe storage devices, which may prevent the system from booting or accessing NVMe-based storage. This mitigation should only be applied if NVMe devices are not essential for system operation.