The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix mr->map double free
rxe_mr_cleanup() which tries to free mr->map again will be called when rxe_mr_init_user() fails:
CPU: 0 PID: 4917 Comm: rdma_flush_serv Kdump: loaded Not tainted 6.1.0-rc1-roce-flush+ #25 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x45/0x5d panic+0x19e/0x349 end_report.part.0+0x54/0x7c kasan_report.cold+0xa/0xf rxe_mr_cleanup+0x9d/0xf0 [rdma_rxe] __rxe_cleanup+0x10a/0x1e0 [rdma_rxe] rxe_reg_user_mr+0xb7/0xd0 [rdma_rxe] ib_uverbs_reg_mr+0x26a/0x480 [ib_uverbs] ib_uverbs_handler_UVERBS_METHOD_INVOKE_WRITE+0x1a2/0x250 [ib_uverbs] ib_uverbs_cmd_verbs+0x1397/0x15a0 [ib_uverbs]
This issue was firstly exposed since commit b18c7da63fcb ("RDMA/rxe: Fix memory leak in error path code") and then we fixed it in commit 8ff5f5d9d8cf ("RDMA/rxe: Prevent double freeing rxe_map_set()") but this fix was reverted together at last by commit 1e75550648da (Revert "RDMA/rxe: Create duplicate mapping tables for FMRs")
Simply let rxe_mr_cleanup() always handle freeing the mr->map once it is successfully allocated.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel | Dec 10, 2025 | Dec 8, 2025 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 10, 2025 | Oct 7, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 9, 2025 | Oct 7, 2025 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Feb 5, 2026 | Dec 13, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub