In the Linux kernel, the following vulnerability has been resolved:
RDMA/mad: Improve handling of timed out WRs of mad agent
Current timeout handler of mad agent acquires/releases mad_agent_priv lock for every timed out WRs. This causes heavy locking contention when higher no. of WRs are to be handled inside timeout handler.
This leads to softlockup with below trace in some use cases where rdma-cm path is used to establish connection between peer nodes
Trace: ----- BUG: soft lockup - CPU#4 stuck for 26s! [kworker/u128:3:19767] CPU: 4 PID: 19767 Comm: kworker/u128:3 Kdump: loaded Tainted: G OE ------- --- 5.14.0-427.13.1.el9_4.x86_64 #1 Hardware name: Dell Inc. PowerEdge R740/01YM03, BIOS 2.4.8 11/26/2019 Workqueue: ib_mad1 timeout_sends [ib_core] RIP: 0010:__do_softirq+0x78/0x2ac RSP: 0018:ffffb253449e4f98 EFLAGS: 00000246 RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 000000000000001f RDX: 000000000000001d RSI: 000000003d1879ab RDI: fff363b66fd3a86b RBP: ffffb253604cbcd8 R08: 0000009065635f3b R09: 0000000000000000 R10: 0000000000000040 R11: ffffb253449e4ff8 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000040 FS: 0000000000000000(0000) GS:ffff8caa1fc80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd9ec9db900 CR3: 0000000891934006 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <IRQ> ? show_trace_log_lvl+0x1c4/0x2df ? show_trace_log_lvl+0x1c4/0x2df ? __irq_exit_rcu+0xa1/0xc0 ? watchdog_timer_fn+0x1b2/0x210 ? __pfx_watchdog_timer_fn+0x10/0x10 ? __hrtimer_run_queues+0x127/0x2c0 ? hrtimer_interrupt+0xfc/0x210 ? __sysvec_apic_timer_interrupt+0x5c/0x110 ? sysvec_apic_timer_interrupt+0x37/0x90 ? asm_sysvec_apic_timer_interrupt+0x16/0x20 ? __do_softirq+0x78/0x2ac ? __do_softirq+0x60/0x2ac __irq_exit_rcu+0xa1/0xc0 sysvec_call_function_single+0x72/0x90 </IRQ> <TASK> asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:_raw_spin_unlock_irq+0x14/0x30 RSP: 0018:ffffb253604cbd88 EFLAGS: 00000247 RAX: 000000000001960d RBX: 0000000000000002 RCX: ffff8cad2a064800 RDX: 000000008020001b RSI: 0000000000000001 RDI: ffff8cad5d39f66c RBP: ffff8cad5d39f600 R08: 0000000000000001 R09: 0000000000000000 R10: ffff8caa443e0c00 R11: ffffb253604cbcd8 R12: ffff8cacb8682538 R13: 0000000000000005 R14: ffffb253604cbd90 R15: ffff8cad5d39f66c cm_process_send_error+0x122/0x1d0 [ib_cm] timeout_sends+0x1dd/0x270 [ib_core] process_one_work+0x1e2/0x3b0 ? __pfx_worker_thread+0x10/0x10 worker_thread+0x50/0x3a0 ? __pfx_worker_thread+0x10/0x10 kthread+0xdd/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x29/0x50 </TASK>
Simplified timeout handler by creating local list of timed out WRs and invoke send handler post creating the list. The new method acquires/ releases lock once to fetch the list and hence helps to reduce locking contetiong when processing higher no. of WRs
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfo | Mar 14, 2025 | Nov 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.115-126.197 | Mar 27, 2025 | Nov 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 11, 2025 | Nov 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Feb 11, 2025 | Nov 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-245-genericUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-aws-5.4Upgrade linux-image-kvm-5.4Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-oracle-4.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-azure-4.15Upgrade linux-image-virtualUpgrade linux-image-5.4.0-224-generic-lpaeUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-5.4.0-1157-azure-fipsUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-4.4.0-1188-awsUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1136-raspiUpgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-lowlatency-5.4Upgrade linux-image-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-6.8.0-1025-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1151-oracleUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.4.0-1156-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-gcp-4.15Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1153-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-4.4.0-276-genericUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-4.15Upgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-snapdragon-5.4Upgrade linux-image-5.4.0-1156-gcpUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-virtual-5.4Upgrade linux-image-ibm-5.4Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-azure-5.4Upgrade linux-image-5.4.0-1057-iotUpgrade linux-image-5.4.0-1140-kvmUpgrade linux-image-5.4.0-224-lowlatencyUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-azure-fips-4.15Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1071-xilinx-zynqmpUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-5.4Upgrade linux-image-5.4.0-1156-azureUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fips-4.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.4.0-1127-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.4.0-1099-ibmUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-5.4Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-fips-5.4Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-azure-fips-5.4Upgrade linux-image-aws-fipsUpgrade linux-image-raspi-5.4Upgrade linux-image-5.4.0-1153-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fips-5.4Upgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-4.15.0-1195-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-224-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-oem-22.04d | Dec 18, 2024 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub