CVE-2024-27435: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27435 is a vulnerability in the Linux kernel's NVMe over RDMA implementation, discovered in a production environment. The issue was identified when the admin queue reconnection would fail indefinitely despite the remote target and network being operational. The vulnerability was disclosed in May 2024 and affects Linux kernel systems using NVMe over RDMA (NVD).

The vulnerability stems from an ABBA deadlock condition in tag allocation. The issue occurs when a keep-alive request holds a tag while waiting inside the admin queue during controller reset. Since the fabric queue shares the tagset with the admin queue, and the admin queue is quiesced during reset, the only available reserved tag becomes locked by the keep-alive command. This prevents the connect command from obtaining a necessary tag for reconnection, resulting in a permanent failure to reconnect the admin queue (Kernel Commit).

The vulnerability results in a denial of service condition where the NVMe over RDMA admin queue fails to reconnect permanently, affecting system storage functionality. This impacts systems using NVMe over RDMA for storage operations, particularly in enterprise environments where storage availability is critical (CISA-ADP).

The vulnerability requires local access and has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (CISA-ADP).

The issue has been fixed by modifying the tag allocation system to reserve two tags for the admin queue instead of one - one for fabric connect and one for keep-alive operations. The fix has been implemented in the Linux kernel through a patch that modifies the NVMe driver code (Kernel Commit).