In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows:
conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler;
rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.165-110.161Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.353-270.569Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.224-212.876Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfo | Mar 10, 2025 | Aug 17, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 7, 2025 | Aug 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfo | Mar 10, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 9, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Nov 26, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade perf | Jan 21, 2025 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-arm | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64k | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub