CVE-2024-44970
A critical flaw in the Linux kernel’s mlx5e driver can corrupt the work queue linked list when a work queue element is unlinked twice. This can lead to memory corruption and potentially allow an attacker to crash or take control of the system. The issue has been fixed in a recent kernel update.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
All Linux kernel users that run a kernel with the mlx5e driver before the fix, especially those using Mellanox (now NVIDIA) network adapters that rely on the mlx5e driver.
Real-world impact
An attacker could send specially crafted completion queue entries that trigger the double unlink, causing memory corruption. This could lead to a denial‑of‑service or, in some cases, arbitrary code execution on the affected system.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited remotely with no authentication or user interaction, and it can compromise confidentiality, integrity, and availability. The high impact and ease of exploitation justify the critical rating.
What to do about it
- 01Update the Linux kernel to a version that includes the fix for CVE-2024-44970.
- 02Reboot the system to load the new kernel.
NVD description indicates the vulnerability has been resolved
Timeline
- Sep 4, 2024 · Sep 4, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.