In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
Upon RQ destruction if the firmware command fails which is the last resource to be destroyed some SW resources were already cleaned regardless of the failure.
Now properly rollback the object to its original state upon such failure.
In order to avoid a use-after free in case someone tries to destroy the object again, which results in the following kernel trace: refcount_t: underflow; use-after-free. WARNING: CPU: 0 PID: 37589 at lib/refcount.c:28 refcount_warn_saturate+0xf4/0x148 Modules linked in: rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) rfkill mlx5_core(OE) mlxdevm(OE) ib_uverbs(OE) ib_core(OE) psample mlxfw(OE) mlx_compat(OE) macsec tls pci_hyperv_intf sunrpc vfat fat virtio_net net_failover failover fuse loop nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vmw_vmci vsock xfs crct10dif_ce ghash_ce sha2_ce sha256_arm64 sha1_ce virtio_console virtio_gpu virtio_blk virtio_dma_buf virtio_mmio dm_mirror dm_region_hash dm_log dm_mod xpmem(OE) CPU: 0 UID: 0 PID: 37589 Comm: python3 Kdump: loaded Tainted: G OE ------- --- 6.12.0-54.el10.aarch64 #1 Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : refcount_warn_saturate+0xf4/0x148 lr : refcount_warn_saturate+0xf4/0x148 sp : ffff80008b81b7e0 x29: ffff80008b81b7e0 x28: ffff000133d51600 x27: 0000000000000001 x26: 0000000000000000 x25: 00000000ffffffea x24: ffff00010ae80f00 x23: ffff00010ae80f80 x22: ffff0000c66e5d08 x21: 0000000000000000 x20: ffff0000c66e0000 x19: ffff00010ae80340 x18: 0000000000000006 x17: 0000000000000000 x16: 0000000000000020 x15: ffff80008b81b37f x14: 0000000000000000 x13: 2e656572662d7265 x12: ffff80008283ef78 x11: ffff80008257efd0 x10: ffff80008283efd0 x9 : ffff80008021ed90 x8 : 0000000000000001 x7 : 00000000000bffe8 x6 : c0000000ffff7fff x5 : ffff0001fb8e3408 x4 : 0000000000000000 x3 : ffff800179993000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff000133d51600 Call trace: refcount_warn_saturate+0xf4/0x148 mlx5_core_put_rsc+0x88/0xa0 [mlx5_ib] mlx5_core_destroy_rq_tracked+0x64/0x98 [mlx5_ib] mlx5_ib_destroy_wq+0x34/0x80 [mlx5_ib] ib_destroy_wq_user+0x30/0xc0 [ib_core] uverbs_free_wq+0x28/0x58 [ib_uverbs] destroy_hw_idr_uobject+0x34/0x78 [ib_uverbs] uverbs_destroy_uobject+0x48/0x240 [ib_uverbs] __uverbs_cleanup_ufile+0xd4/0x1a8 [ib_uverbs] uverbs_destroy_ufile_hw+0x48/0x120 [ib_uverbs] ib_uverbs_close+0x2c/0x100 [ib_uverbs] __fput+0xd8/0x2f0 __fput_sync+0x50/0x70 __arm64_sys_close+0x40/0x90 invoke_syscall.constprop.0+0x74/0xd0 do_el0_svc+0x48/0xe8 el0_svc+0x44/0x1d0 el0t_64_sync_handler+0x120/0x130 el0t_64_sync+0x1a4/0x1a8
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.355-280.672Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-develUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-broadcom | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-fipsUpgrade linux-image-azureUpgrade linux-image-aws-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-gke-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-virtual-5.15Upgrade linux-image-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-awsUpgrade linux-image-aws-lts-22.04 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub