CVE-2024-38544RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- 9.8CriticalCVSS base score
- 0.81%Exploitation in 30 daysEPSS · top 42% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the resp_pkts queue and then a decision is made whether to run the completer task inline or schedule it. Finally the skb is dereferenced to bump a 'hw' performance counter. This is wrong because if the completer task is already running in a separate thread it may have already processed the skb and freed it which can cause a seg fault. This has been observed infrequently in testing at high scale. This patch fixes this by changing the order of enqueuing the packet until after the counter is accessed.
Timeline
ID reserved
By Linux
- 1 day later
· 1 day later
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CISA-ADPADP (enrichment) | 3.1 | Medium6.3 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H |
| NVDNVD · Modified | 3.1 | Medium6.3 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.81% · top 42% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Affected products
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < c91fb72a2ca6480d8d77262eef52dc5b178463a3
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < de5a059e36657442b5637cc16df5163e435b9cb4
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < e0e14dd35d4242340c7346aac60c7ff8fbf87ffc
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < 21b4c6d4d89030fd4657a8e7c8110fd941049794
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < bbad88f111a1829f366c189aa48e7e58e57553fc
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < 30df4bef8b8e183333e9b6e9d4509d552c7da6eb
- affected 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – < 2b23b6097303ed0ba5f4bc036a1c07b6027af5c6
- affected 4.12
- unaffected < 4.12
- unaffected 5.4.285 – ≤ 5.4.*
- unaffected 5.10.227 – ≤ 5.10.*
- unaffected 5.15.168 – ≤ 5.15.*
- unaffected 6.1.93 – ≤ 6.1.*
- unaffected 6.6.33 – ≤ 6.6.*
- unaffected 6.8.12 – ≤ 6.8.*
- unaffected 6.9.3 – ≤ 6.9.*
- unaffected 6.10 – ≤ *
References
References9
- https://git.kernel.org/stable/c/c91fb72a2ca6480d8d77262eef52dc5b178463a3 (opens in a new tab)
- https://git.kernel.org/stable/c/de5a059e36657442b5637cc16df5163e435b9cb4 (opens in a new tab)
- https://git.kernel.org/stable/c/e0e14dd35d4242340c7346aac60c7ff8fbf87ffc (opens in a new tab)
- https://git.kernel.org/stable/c/faa8d0ecf6c9c7c2ace3ca3e552180ada6f75e19 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/21b4c6d4d89030fd4657a8e7c8110fd941049794 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/bbad88f111a1829f366c189aa48e7e58e57553fc (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/30df4bef8b8e183333e9b6e9d4509d552c7da6eb (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/2b23b6097303ed0ba5f4bc036a1c07b6027af5c6 (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-37407 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-38544)Record last updated .