In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Prevent handling any completions after qp destroy
HW may generate completions that indicates QP is destroyed. Driver should not be scheduling any more completion handlers for this QP, after the QP is destroyed. Since CQs are active during the QP destroy, driver may still schedule completion handlers. This can cause a race where the destroy_cq and poll_cq running simultaneously.
Snippet of kernel panic while doing bnxt_re driver load unload in loop. This indicates a poll after the CQ is freed.
[77786.481636] Call Trace: [77786.481640] <TASK> [77786.481644] bnxt_re_poll_cq+0x14a/0x620 [bnxt_re] [77786.481658] ? kvm_clock_read+0x14/0x30 [77786.481693] __ib_process_cq+0x57/0x190 [ib_core] [77786.481728] ib_cq_poll_work+0x26/0x80 [ib_core] [77786.481761] process_one_work+0x1e5/0x3f0 [77786.481768] worker_thread+0x50/0x3a0 [77786.481785] ? __pfx_worker_thread+0x10/0x10 [77786.481790] kthread+0xe2/0x110 [77786.481794] ? __pfx_kthread+0x10/0x10 [77786.481797] ret_from_fork+0x2c/0x50
To avoid this, complete all completion handlers before returning the destroy QP. If free_cq is called soon after destroy_qp, IB stack will cancel the CQ work before invoking the destroy_cq verb and this will prevent any race mentioned.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel | Oct 11, 2026 | Oct 5, 2026 |
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Dec 24, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | Dec 24, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-rt-kvm | Oct 7, 2026 | Oct 6, 2026 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-aws-5.15Upgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-awsUpgrade linux-realtimeUpgrade linux-nvidia-tegraUpgrade linux-ibm-5.15Upgrade linux-bluefieldUpgrade linux-azure-fdeUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux | Jan 6, 2026 | Dec 24, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub