CVE-2024-27435

In the Linux kernel, the following vulnerability has been resolved: nvme: fix reconnection fail due to reserved tag allocation We found a issue on production environment while using NVMe over RDMA, admin_q reconnect failed forever while remote target and network is ok. After dig into it, we found it may caused by a ABBA deadlock due to tag allocation. In my case, the tag was hold by a keep alive request waiting inside admin_q, as we quiesced admin_q while reset ctrl, so the request maked as idle and will not process before reset success. As fabric_q shares tagset with admin_q, while reconnect remote target, we need a tag for connect command, but the only one reserved tag was held by keep alive command which waiting inside admin_q. As a result, we failed to reconnect admin_q forever. In order to fix this issue, I think we should keep two reserved tags for admin queue.

• CWE-667

• https://git.kernel.org/stable/c/149afee5c7418ec5db9d7387b9c9a5c1eb7ea2a8Patch
• https://git.kernel.org/stable/c/262da920896e2f2ab0e3947d9dbee0aa09045818Patch
• https://git.kernel.org/stable/c/6851778504cdb49431809b4ba061903d5f592c96Patch
• https://git.kernel.org/stable/c/de105068fead55ed5c07ade75e9c8e7f86a00d1dPatch
• https://git.kernel.org/stable/c/ff2f90f88d78559802466ad1c84ac5bda4416b3aPatch
• https://git.kernel.org/stable/c/149afee5c7418ec5db9d7387b9c9a5c1eb7ea2a8Patch
• https://git.kernel.org/stable/c/262da920896e2f2ab0e3947d9dbee0aa09045818Patch
• https://git.kernel.org/stable/c/6851778504cdb49431809b4ba061903d5f592c96Patch
• https://git.kernel.org/stable/c/de105068fead55ed5c07ade75e9c8e7f86a00d1dPatch
• https://git.kernel.org/stable/c/ff2f90f88d78559802466ad1c84ac5bda4416b3aPatch

Published

May 17, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2743An issue was discovered in GitLab-EE starting with version 1…9.1
• CVE-2024-27430Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-27431In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27432In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27433In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-27434In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27436In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27437In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27438Download of Code Without Integrity Check vulnerability in Ap…9.8
• CVE-2024-27439An error in the evaluation of the fetch metadata headers cou…6.5
• CVE-2024-2744The NextGEN Gallery WordPress plugin before 3.59.1 does not…4.3
• CVE-2024-27440The Toyoko Inn official App for iOS versions prior to 1.13.0…4.8