In the Linux kernel, the following vulnerability has been resolved:
net/sched: fq_pie: prevent dismantle issue
For some reason, fq_pie_destroy() did not copy working code from pie_destroy() and other qdiscs, thus causing elusive bug.
Before calling del_timer_sync(&q->adapt_timer), we need to ensure timer will not rearm itself.
rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-....: (4416 ticks this GP) idle=60d/1/0x4000000000000000 softirq=10433/10434 fqs=2579 (t=10501 jiffies g=13085 q=3989) NMI backtrace for cpu 0 CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:343 print_cpu_stall kernel/rcu/tree_stall.h:627 [inline] check_cpu_stall kernel/rcu/tree_stall.h:711 [inline] rcu_pending kernel/rcu/tree.c:3878 [inline] rcu_sched_clock_irq.cold+0x9d/0x746 kernel/rcu/tree.c:2597 update_process_times+0x16d/0x200 kernel/time/timer.c:1785 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1428 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:write_comp_data kernel/kcov.c:221 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x1d/0x80 kernel/kcov.c:273 Code: 54 c8 20 48 89 10 c3 66 0f 1f 44 00 00 53 41 89 fb 41 89 f1 bf 03 00 00 00 65 48 8b 0c 25 40 70 02 00 48 89 ce 4c 8b 54 24 08 <e8> 4e f7 ff ff 84 c0 74 51 48 8b 81 88 15 00 00 44 8b 81 84 15 00 RSP: 0018:ffffc90000d27b28 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff888064bf1bf0 RCX: ffff888011928000 RDX: ffff888011928000 RSI: ffff888011928000 RDI: 0000000000000003 RBP: ffff888064bf1c28 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff875d8295 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880783dd300 R14: 0000000000000000 R15: 0000000000000000 pie_calculate_probability+0x405/0x7c0 net/sched/sch_pie.c:418 fq_pie_timer+0x170/0x2a0 net/sched/sch_fq_pie.c:383 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734 __run_timers kernel/time/timer.c:1715 [inline] run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 run_ksoftirqd kernel/softirq.c:921 [inline] run_ksoftirqd+0x2d/0x60 kernel/softirq.c:913 smpboot_thread_fn+0x645/0x9c0 kernel/smpboot.c:164 kthread+0x405/0x4f0 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.93-87.444 | May 22, 2025 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dtb-sprdUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kb | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub