CVE-2024-53100

A flaw was found in the Linux kernel's NVMe over TCP (Non-Volatile Memory Express over Transmission Control Protocol) driver. A race condition can occur between locking and destroying queue resources when querying address information during error recovery. A local user could exploit this timing issue to cause a kernel crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the nvme-tcp kernel module from being loaded if NVMe over TCP storage is not required.

1. Blacklist the module by executing the following commands as root:

echo "blacklist nvme-tcp" > /etc/modprobe.d/nvme-tcp.conf
echo "install nvme-tcp /bin/true" >> /etc/modprobe.d/nvme-tcp.conf

2. If the module is currently loaded and not in active use, unload it:

modprobe -r nvme-tcp

Warning: If the module is actively in use by attached NVMe storage devices, unloading it will disrupt storage connectivity, and a system reboot will be required for the configuration changes to take effect. Applying this mitigation will prevent the system from establishing connections to NVMe over Fabrics devices using TCP.