In the Linux kernel, the following vulnerability has been resolved:
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
syzbot is reporting lockdep warning at rds_tcp_reset_callbacks() [1], for commit ac3615e7f3cffe2a ("RDS: TCP: Reduce code duplication in rds_tcp_reset_callbacks()") added cancel_delayed_work_sync() into a section protected by lock_sock() without realizing that rds_send_xmit() might call lock_sock().
We don't need to protect cancel_delayed_work_sync() using lock_sock(), for even if rds_{send,recv}_worker() re-queued this work while __flush_work() from cancel_delayed_work_sync() was waiting for this work to complete, retried rds_{send,recv}_worker() is no-op due to the absence of RDS_CONN_UP bit.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.15.75-48.135Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-toolsUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-riscv-5.15Upgrade linux-awsUpgrade linux-lowlatencyUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-aws-5.15Upgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-gkeUpgrade linuxUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-azure-5.15Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-xilinx-zynqmpUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-nvidiaUpgrade linux-gcp-fipsUpgrade linux-azure-fdeUpgrade linux-hweUpgrade linux-iotUpgrade linux-hwe-5.4Upgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-4.15Upgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-realtimeUpgrade linux-intel-iotg | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub