Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — net/mlx5: Fix error path in multi-packet WQE transmit
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0033 25.6 —
AFFECTED
Product Versions Fixed
Linux 5af75c747e2a868abbf8611494b50ed5e076fca7 – —
Linux 5.10 – 5.10.227
TIMELINE
Oct 21 Reserved by Linux
Oct 21 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-50001 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix error path in multi-packet WQE transmit
Remove the erroneous unmap in case no DMA mapping was established
The multi-packet WQE transmit code attempts to obtain a DMA mapping for
the skb. This could fail, e.g. under memory pressure, when the IOMMU
driver just can't allocate more memory for page tables. While the code
tries to handle this in the path below the err_unmap label it erroneously
unmaps one entry from the sq's FIFO list of active mappings. Since the
current map attempt failed this unmap is removing some random DMA mapping
that might still be required. If the PCI function now presents that IOVA,
the IOMMU may assumes a rogue DMA access and e.g. on s390 puts the PCI
function in error state.
The erroneous behavior was seen in a stress-test environment that created
memory pressure.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| October 21, 2024 | Reserved | Reserved by Linux |
| October 21, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-50001 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 5af75c747e2a868abbf8611494b50ed5e076fca7 | — |
| Linux | Linux | — | 5.10 | 5.10.227 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-50001 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.