In the Linux kernel, the following vulnerability has been resolved:
nvme-rdma: fix possible use-after-free in transport error_recovery work
While nvme_rdma_submit_async_event_work is checking the ctrl and queue state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this check is not reliable the error recovery work must flush async_event_work before continuing to destroy the admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and the error recovery handler itself changing the ctrl state.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64 | Aug 28, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade python-perfUpgrade kernel-tools | Jan 21, 2025 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Jul 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linux-iotUpgrade linux-oracle-5.4Upgrade linux-ibm-5.4Upgrade linuxUpgrade linux-azureUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-azure-fde-5.15Upgrade linux-gcp-5.4Upgrade linux-ibmUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-hwe-5.4 | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub