In the Linux kernel, the following vulnerability has been resolved:
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
When a bio with REQ_PREFLUSH is submitted to dm, __send_empty_flush() generates a flush_bio with REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC, which causes the flush_bio to be throttled by wbt_wait().
An example from v5.4, similar problem also exists in upstream:
crash> bt 2091206 PID: 2091206 TASK: ffff2050df92a300 CPU: 109 COMMAND: "kworker/u260:0" #0 [ffff800084a2f7f0] __switch_to at ffff80004008aeb8 #1 [ffff800084a2f820] __schedule at ffff800040bfa0c4 #2 [ffff800084a2f880] schedule at ffff800040bfa4b4 #3 [ffff800084a2f8a0] io_schedule at ffff800040bfa9c4 #4 [ffff800084a2f8c0] rq_qos_wait at ffff8000405925bc #5 [ffff800084a2f940] wbt_wait at ffff8000405bb3a0 #6 [ffff800084a2f9a0] __rq_qos_throttle at ffff800040592254 #7 [ffff800084a2f9c0] blk_mq_make_request at ffff80004057cf38 #8 [ffff800084a2fa60] generic_make_request at ffff800040570138 #9 [ffff800084a2fae0] submit_bio at ffff8000405703b4 #10 [ffff800084a2fb50] xlog_write_iclog at ffff800001280834 [xfs] #11 [ffff800084a2fbb0] xlog_sync at ffff800001280c3c [xfs] #12 [ffff800084a2fbf0] xlog_state_release_iclog at ffff800001280df4 [xfs] #13 [ffff800084a2fc10] xlog_write at ffff80000128203c [xfs] #14 [ffff800084a2fcd0] xlog_cil_push at ffff8000012846dc [xfs] #15 [ffff800084a2fda0] xlog_cil_push_work at ffff800001284a2c [xfs] #16 [ffff800084a2fdb0] process_one_work at ffff800040111d08 #17 [ffff800084a2fe00] worker_thread at ffff8000401121cc #18 [ffff800084a2fe70] kthread at ffff800040118de4
After commit 2def2845cc33 ("xfs: don't allow log IO to be throttled"), the metadata submitted by xlog_write_iclog() should not be throttled. But due to the existence of the dm layer, throttling flush_bio indirectly causes the metadata bio to be throttled.
Fix this by conditionally adding REQ_IDLE to flush_bio.bi_opf, which makes wbt_should_throttle() return false to avoid wbt_wait().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12Upgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perfUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.31-35.92Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.141-155.222Upgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-rt-extra | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-gcpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-generic-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1043-gke | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub