{"id":"CVE-2024-50135","title":"nvme-pci: fix race condition between reset and nvme_dev_disable()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix race condition between reset and nvme_dev_disable()\n\nnvme_dev_disable() modifies the dev->online_queues field, therefore\nnvme_pci_update_nr_queues() shoul…","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"adp","vendor":"Linux","product":"Linux","affected":["Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < 0beb55fc6086c86eb07954c914e728a8cb0cd57e","Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < 4ed32cc0939b64e3d7b48c8c0d63ea038775f304","Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < b33e49a5f254474b33ce98fd45dd0ffdc247a0be","Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < 26bc0a81f64ce00fc4342c38eeb2eddaad084dd2","Linux 4.6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2025-10-01T20:21:20.483764Z"},"published":"2024-11-05","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:19:49.347Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-50135","references":[{"url":"https://git.kernel.org/stable/c/0beb55fc6086c86eb07954c914e728a8cb0cd57e"},{"url":"https://git.kernel.org/stable/c/4ed32cc0939b64e3d7b48c8c0d63ea038775f304"},{"url":"https://git.kernel.org/stable/c/b33e49a5f254474b33ce98fd45dd0ffdc247a0be"},{"url":"https://git.kernel.org/stable/c/26bc0a81f64ce00fc4342c38eeb2eddaad084dd2"}],"tags":["cve.org"],"epss":0.00165,"epssPercentile":0.05732,"ingestedAt":"2026-11-03T14:47:02.511Z","slug":"CVE-2024-50135","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix race condition between reset and nvme_dev_disable()\n\nnvme_dev_disable() modifies the dev->online_queues field, therefore\nnvme_pci_update_nr_queues() should avoid racing against it, otherwise\nwe could end up passing invalid values to blk_mq_update_nr_hw_queues().\n\n WARNING: CPU: 39 PID: 61303 at drivers/pci/msi/api.c:347\n          pci_irq_get_affinity+0x187/0x210\n Workqueue: nvme-reset-wq nvme_reset_work [nvme]\n RIP: 0010:pci_irq_get_affinity+0x187/0x210\n Call Trace:\n  <TASK>\n  ? blk_mq_pci_map_queues+0x87/0x3c0\n  ? pci_irq_get_affinity+0x187/0x210\n  blk_mq_pci_map_queues+0x87/0x3c0\n  nvme_pci_map_queues+0x189/0x460 [nvme]\n  blk_mq_update_nr_hw_queues+0x2a/0x40\n  nvme_reset_work+0x1be/0x2a0 [nvme]\n\nFix the bug by locking the shutdown_lock mutex before using\ndev->online_queues. Give up if nvme_dev_disable() is running or if\nit has been executed already.\n\n## Affected\n\n- `Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < 0beb55fc6086c86eb07954c914e728a8cb0cd57e`\n- `Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < 4ed32cc0939b64e3d7b48c8c0d63ea038775f304`\n- `Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < b33e49a5f254474b33ce98fd45dd0ffdc247a0be`\n- `Linux >= 949928c1c731417cc0f070912c63878b62b544f4 < 26bc0a81f64ce00fc4342c38eeb2eddaad084dd2`\n- `Linux 4.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}