In the Linux kernel, the following vulnerability has been resolved:
nvme-rdma: destroy cm id before destroy qp to avoid use after free
We should always destroy cm_id before destroy qp to avoid to get cma event after qp was destroyed, which may lead to use after free. In RDMA connection establishment error flow, don't destroy qp in cm event handler.Just report cm_error to upper level, qp will be destroy in nvme_rdma_alloc_queue() after destroy cm id.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade perf | Nov 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jul 16, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | Jan 21, 2025 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Nov 11, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-preemptUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-socionext | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1167-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-virtual-5.4Upgrade linux-image-aws-fips-4.15Upgrade linux-image-azureUpgrade linux-image-4.15.0-2096-gcp-fipsUpgrade linux-image-fips-5.4Upgrade linux-image-5.4.0-1066-iotUpgrade linux-image-4.15.0-2133-aws-fipsUpgrade linux-image-5.4.0-1165-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-azure-fipsUpgrade linux-image-snapdragon-5.4Upgrade linux-image-5.4.0-1136-fipsUpgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-1158-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1145-raspiUpgrade linux-image-5.4.0-1121-bluefieldUpgrade linux-image-5.4.0-1160-oracleUpgrade linux-image-generic-5.4Upgrade linux-image-4.15.0-1195-awsUpgrade linux-image-aws-hweUpgrade linux-image-aws-5.4Upgrade linux-image-ibmUpgrade linux-image-aws-4.15Upgrade linux-image-genericUpgrade linux-image-5.4.0-1080-xilinx-zynqmpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-bluefield-5.4Upgrade linux-image-5.4.0-1167-azure-fipsUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-kvm-5.4Upgrade linux-image-ibm-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-4.15Upgrade linux-image-4.15.0-1188-gcpUpgrade linux-image-5.4.0-234-lowlatencyUpgrade linux-image-azure-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-2113-azure-fipsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1150-fipsUpgrade linux-image-lowlatency-5.4Upgrade linux-image-5.4.0-234-generic-lpaeUpgrade linux-image-gcp-lts-20.04No solution existsUpgrade linux-image-5.4.0-1162-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1161-oracleUpgrade linux-image-4.15.0-1177-kvmUpgrade linux-image-5.4.0-234-genericUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-4.15.0-254-genericUpgrade linux-image-azure-fips-5.4Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-4.15Upgrade linux-image-raspi-5.4Upgrade linux-image-4.15.0-1205-azureUpgrade linux-image-oracle-5.4Upgrade linux-image-4.15.0-254-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1149-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-5.4.0-1108-ibmUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1165-gcpUpgrade linux-image-generic-lpae-5.4 | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub