Vulnerability in Linux
CVE-2024-50157
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop Driver waits indefinitely for the fifo occupancy to go below a threshold as soon as the pacing interrupt is received. This can cause soft lockup on one of the processors, if the rate of DB is very high. Add a loop count for FPGA and exit the __wait_for_fifo_occupancy_below_th if the loop is taking more time. Pacing will be continuing until the occupancy is below the threshold. This is ensured by the checks in bnxt_re_pacing_timer_exp and further scheduling the work for pacing based on the fifo occupancy.
EPSS: 0.002 (12.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 2ad4e6303a6d7518632739eaf67821a3553db1bd, 6.6, 0
- Linux Linux_kernel — versions 6.12
References
Frequently asked questions
- What is CVE-2024-50157?
- CVE-2024-50157 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2024-11-07.
- How severe is CVE-2024-50157?
- Medium severity. CVSS v3 base score is 5.5 out of 10.