In the Linux kernel, the following vulnerability has been resolved:
nvme-rdma: destroy cm id before destroy qp to avoid use after free
We should always destroy cm_id before destroy qp to avoid to get cma event after qp was destroyed, which may lead to use after free. In RDMA connection establishment error flow, don't destroy qp in cm event handler.Just report cm_error to upper level, qp will be destroy in nvme_rdma_alloc_queue() after destroy cm id.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-headers | Nov 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jul 16, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-devel | Jan 21, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Nov 11, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-preempt-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade kernel-preemptUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-arm | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-4.15Upgrade linux-image-virtualUpgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-2113-azure-fipsUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-254-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-18.04No solution existsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1205-azureUpgrade linux-image-4.15.0-1177-kvmUpgrade linux-image-4.15.0-254-lowlatencyUpgrade linux-image-4.15.0-1150-fipsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-4.15.0-1188-gcpUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-aws-4.15Upgrade linux-image-gcp-fipsUpgrade linux-image-genericUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-4.15.0-2133-aws-fipsUpgrade linux-image-4.15.0-1195-awsUpgrade linux-image-4.15.0-2096-gcp-fipsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-fipsUpgrade linux-image-aws-hweUpgrade linux-image-gcpUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcp-4.15Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub