CVE-2024-50135

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: A race condition exists between reset and nvme dev disable() in the Linux kernel. The nvme dev disable() function modifies the dev->online queues field, and nvme pci update nr queues() should avoid racing against it to prevent passing invalid values to blk mq update nr hw queues(). This issue can cause errors, including a warning message indicating a CPU issue and a call trace involving various kernel functions.

Recommendations: For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider applying a patch that locks the shutdown lock mutex before using dev->online queues to prevent the race condition. Give up if nvme dev disable() is running or if it has been executed already.