CVE-2024-46717
A flaw in the Linux kernel’s mlx5e network driver caused SHAMPO header pages to be released twice, which could crash the system. The issue has been fixed in a kernel update. Users should update to the latest kernel version to resolve it.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users running the mlx5e driver for Mellanox/Intel network adapters, especially versions before the fix was applied.
Real-world impact
An attacker could trigger the double release of SHAMPO header pages, leading to a kernel crash and a denial‑of‑service condition on the affected system.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited remotely without authentication, requires no user interaction, and can compromise confidentiality, integrity, and availability of the system.
What to do about it
- 01Update your Linux kernel to the latest stable release that includes the fix for the mlx5e driver.
- 02Reboot the system to load the updated kernel.
NVD description indicates the issue has been resolved.
Timeline
- Sep 18, 2024 · Sep 18, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.