CVE-2024-44984
A critical vulnerability in the Linux kernel's bnxt_en network driver causes a double DMA unmapping error when processing XDP_REDIRECT packets, triggering a kernel warning and potentially leading to instability. The flaw has been assigned a CVSS base score of 10 (critical). The issue is resolved by removing the erroneous dma_unmap_page_attrs() call, and a fix is included in the Linux kernel source.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel systems using the bnxt_en driver (including versions referenced in the CPE data).
Real-world impact
Exploitation could lead to kernel warnings, possible denial of service, or other unpredictable behavior due to improper DMA handling.
Why this severity
The CVSS score of 10 reflects the vulnerability's network‑adjacent, low‑complexity nature with no privileges or user interaction required, and its potential to affect confidentiality, integrity, and availability.
What to do about it
- 011. Obtain a Linux kernel version that includes the bnxt_en fix for CVE-2024-44984 (the patch that removes the dma_unmap_page_attrs() call in the XDP_REDIRECT code path).
- 022. Install the updated kernel on the affected system.
- 033. Reboot the system to load the patched kernel.
NVD-referenced vendor advisory (the NVD description states the vulnerability has been resolved in the Linux kernel).
Timeline
- Sep 4, 2024 · Sep 4, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.