In the Linux kernel, the following vulnerability has been resolved:
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
syzbot is reporting lockdep warning at rds_tcp_reset_callbacks() [1], for commit ac3615e7f3cffe2a ("RDS: TCP: Reduce code duplication in rds_tcp_reset_callbacks()") added cancel_delayed_work_sync() into a section protected by lock_sock() without realizing that rds_send_xmit() might call lock_sock().
We don't need to protect cancel_delayed_work_sync() using lock_sock(), for even if rds_{send,recv}_worker() re-queued this work while __flush_work() from cancel_delayed_work_sync() was waiting for this work to complete, retried rds_{send,recv}_worker() is no-op due to the absence of RDS_CONN_UP bit.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.155-138.670Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-raspi-5.4Upgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-iotUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-gcp-4.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-azureUpgrade linux-raspiUpgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-awsUpgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-aws-5.15Upgrade linuxUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-gkeUpgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-gcp-5.4 | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub