Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
AV AC PR UI S C I A CVSS EPSS %ile KEV
L H L N U N H H 6.3 .0081 54.2 —
AFFECTED
Product Versions Fixed
Linux 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 – —
Linux 4.12 – 5.4.285
TIMELINE
Jun 18 Reserved by Linux
Jun 19 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-38544 (Linux). CVSS 9.8 → 6.3 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
In rxe_comp_queue_pkt() an incoming response packet skb is enqueued to the
resp_pkts queue and then a decision is made whether to run the completer
task inline or schedule it. Finally the skb is dereferenced to bump a 'hw'
performance counter. This is wrong because if the completer task is
already running in a separate thread it may have already processed the skb
and freed it which can cause a seg fault. This has been observed
infrequently in testing at high scale.
This patch fixes this by changing the order of enqueuing the packet until
after the counter is accessed.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| June 18, 2024 | Reserved | Reserved by Linux |
| June 19, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-38544 (Linux). CVSS 9.8 → 6.3 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 0b1e5b99a48b5b810e3e38f1d6e0d39306b99ec0 | — |
| Linux | Linux | — | 4.12 | 5.4.285 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-38544 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.