CVE-2024-53169
CVE-2024-53169 is a critical Linux kernel vulnerability (CVSS 9.8) caused by a race condition during controller shutdown. A timing issue between keep-alive operations and queue destruction could lead to kernel crashes. The fix involves moving a kernel function to prevent this race.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users, specifically versions 6.11 and others impacted by the vulnerability
Real-world impact
Could cause system crashes (kernel panics) during controller shutdown, potentially leading to service disruption or instability
Why this severity
Critical severity due to high risk of kernel crashes affecting system stability
What to do about it
- 01Upgrade Linux kernel to a version that includes the fix for CVE-2024-53169 (specifically versions patched after commit a54a93d0e359)
- 02Apply the kernel patch provided in the NVD description or vendor advisory
NVD description and commit a54a93d0e359 ('nvme: move stopping keep-alive into nvme_uninit_ctrl()')
Timeline
- Dec 27, 2024 · Dec 27, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.