In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
__xa_store() and __xa_erase() were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xa_store() and xa_erase(), which perform the necessary locking internally.
============================= WARNING: suspicious RCPU usage 6.14.0-rc7_for_upstream_debug_2025_03_18_15_01 #1 Not tainted ----------------------------- ./include/linux/xarray.h:1211 suspicious rcu_dereference_protected() usage!
other info that might help us debug this:
rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u136:0/219: at: process_one_work+0xbe4/0x15f0 process_one_work+0x75c/0x15f0 pagefault_mr+0x9a5/0x1390 [mlx5_ib]
stack backtrace: CPU: 14 UID: 0 PID: 219 Comm: kworker/u136:0 Not tainted 6.14.0-rc7_for_upstream_debug_2025_03_18_15_01 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: mlx5_ib_page_fault mlx5_ib_eqe_pf_action [mlx5_ib] Call Trace: dump_stack_lvl+0xa8/0xc0 lockdep_rcu_suspicious+0x1e6/0x260 xas_create+0xb8a/0xee0 xas_store+0x73/0x14c0 __xa_store+0x13c/0x220 ? xa_store_range+0x390/0x390 ? spin_bug+0x1d0/0x1d0 pagefault_mr+0xcb5/0x1390 [mlx5_ib] ? _raw_spin_unlock+0x1f/0x30 mlx5_ib_eqe_pf_action+0x3be/0x2620 [mlx5_ib] ? lockdep_hardirqs_on_prepare+0x400/0x400 ? mlx5_ib_invalidate_range+0xcb0/0xcb0 [mlx5_ib] process_one_work+0x7db/0x15f0 ? pwq_dec_nr_in_flight+0xda0/0xda0 ? assign_work+0x168/0x240 worker_thread+0x57d/0xcd0 ? rescuer_thread+0xc40/0xc40 kthread+0x3b3/0x800 ? kthread_is_per_cpu+0xb0/0xb0 ? lock_downgrade+0x680/0x680 ? do_raw_spin_lock+0x12d/0x270 ? spin_bug+0x1d0/0x1d0 ? finish_task_switch.isra.0+0x284/0x9e0 ? lockdep_hardirqs_on_prepare+0x284/0x400 ? kthread_is_per_cpu+0xb0/0xb0 ret_from_fork+0x2d/0x70 ? kthread_is_per_cpu+0xb0/0xb0 ret_from_fork_asm+0x11/0x20
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.37-61.105Upgrade perf6.12Upgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-develUpgrade perf6.12-debuginfo | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade kernel-devel | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-generic-6.14Upgrade linux-image-azureUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub