CVE-2024-38608: Linux kernel · net/mlx5e: Fix netif state handling
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 30 Oct 2026, 15:33 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 19 Jun 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include the patch for CVE-2024-38608 to resolve the issue. No additional mitigation steps are required beyond applying the patch.
Description
CVE-2024-38608 is a vulnerability in the Linux kernel's mlx5e network driver where improper handling of netif device state can lead to a NULL pointer dereference and memory leaks. The issue arises because mlx5e_suspend only cleans resources if netif_device_present() returns true, but mlx5e_resume changes netif state only if reg_state equals NETREG_REGISTERED. This mismatch can cause a kernel NULL pointer dereference (Oops) and resource leaks during certain failure scenarios in network device registration.
References
- git.kernel.org/stable/c/96e3eeccea9b55ca9c6a18a5a59ee3d6f12e0fb3 (opens in a new tab)
- git.kernel.org/stable/c/70eca80d98a44f47cd1633d0c20bda8ae546b4d1 (opens in a new tab)
- git.kernel.org/stable/c/f7e6cfb864a53af71c5cc904f1cc22215d68f5c6 (opens in a new tab)
- git.kernel.org/stable/c/3d5918477f94e4c2f064567875c475468e264644 (opens in a new tab)