In the Linux kernel, the following vulnerability has been resolved:
nvme-rdma: destroy cm id before destroy qp to avoid use after free
We should always destroy cm_id before destroy qp to avoid to get cma event after qp was destroyed, which may lead to use after free. In RDMA connection establishment error flow, don't destroy qp in cm event handler.Just report cm_error to upper level, qp will be destroy in nvme_rdma_alloc_queue() after destroy cm id.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools | Nov 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jul 16, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | Jan 21, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Nov 11, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-preemptUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-source | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-234-generic-lpaeUpgrade linux-image-5.4.0-234-genericUpgrade linux-image-raspi-5.4Upgrade linux-image-azure-fips-4.15Upgrade linux-image-lowlatency-5.4Upgrade linux-image-4.15.0-1205-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-4.15.0-1188-gcpUpgrade linux-image-bluefieldUpgrade linux-image-azure-4.15Upgrade linux-image-oracle-4.15Upgrade linux-image-5.4.0-1165-gcpUpgrade linux-image-4.15.0-254-lowlatencyUpgrade linux-image-4.15.0-1177-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-5.4Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1150-fipsUpgrade linux-image-5.4.0-1162-awsUpgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1108-ibmUpgrade linux-image-azure-lts-18.04No solution existsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1149-kvmUpgrade linux-image-azure-5.4Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-254-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-2113-azure-fipsUpgrade linux-image-5.4.0-234-lowlatencyUpgrade linux-image-azure-fips-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-5.4Upgrade linux-image-gcp-4.15Upgrade linux-image-5.4.0-1121-bluefieldUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-5.4Upgrade linux-image-raspi2Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-5.4.0-1167-azure-fipsUpgrade linux-image-4.15.0-1195-awsUpgrade linux-image-bluefield-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1167-azureUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1136-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1165-gcp-fipsUpgrade linux-image-5.4.0-1160-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-5.4Upgrade linux-image-5.4.0-1066-iotUpgrade linux-image-4.15.0-2133-aws-fipsUpgrade linux-image-4.15.0-1158-oracleUpgrade linux-image-4.15.0-2096-gcp-fipsUpgrade linux-image-5.4.0-1080-xilinx-zynqmpUpgrade linux-image-fips-5.4Upgrade linux-image-aws-hweUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-5.4Upgrade linux-image-ibm-5.4Upgrade linux-image-azureUpgrade linux-image-snapdragon-5.4Upgrade linux-image-kvm-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-aws-fips-4.15Upgrade linux-image-aws-4.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1145-raspiUpgrade linux-image-snapdragon-hwe-18.04 | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub