In the Linux kernel, the following vulnerability has been resolved:
RDMA/srp: Set scmnd->result only when scmnd is not NULL
This change fixes the following kernel NULL pointer dereference which is reproduced by blktests srp/007 occasionally.
BUG: kernel NULL pointer dereference, address: 0000000000000170 PGD 0 P4D 0 Oops: 0002 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 9 Comm: kworker/0:1H Kdump: loaded Not tainted 6.0.0-rc1+ #37 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.15.0-29-g6a62e0cb0dfe-prebuilt.qemu.org 04/01/2014 Workqueue: 0x0 (kblockd) RIP: 0010:srp_recv_done+0x176/0x500 [ib_srp] Code: 00 4d 85 ff 0f 84 52 02 00 00 48 c7 82 80 02 00 00 00 00 00 00 4c 89 df 4c 89 14 24 e8 53 d3 4a f6 4c 8b 14 24 41 0f b6 42 13 <41> 89 87 70 01 00 00 41 0f b6 52 12 f6 c2 02 74 44 41 8b 42 1c b9 RSP: 0018:ffffaef7c0003e28 EFLAGS: 00000282 RAX: 0000000000000000 RBX: ffff9bc9486dea60 RCX: 0000000000000000 RDX: 0000000000000102 RSI: ffffffffb76bbd0e RDI: 00000000ffffffff RBP: ffff9bc980099a00 R08: 0000000000000001 R09: 0000000000000001 R10: ffff9bca53ef0000 R11: ffff9bc980099a10 R12: ffff9bc956e14000 R13: ffff9bc9836b9cb0 R14: ffff9bc9557b4480 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff9bc97ec00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000170 CR3: 0000000007e04000 CR4: 00000000000006f0 Call Trace: <IRQ> __ib_process_cq+0xb7/0x280 [ib_core] ib_poll_handler+0x2b/0x130 [ib_core] irq_poll_softirq+0x93/0x150 __do_softirq+0xee/0x4b8 irq_exit_rcu+0xf7/0x130 sysvec_apic_timer_interrupt+0x8e/0xc0 </IRQ>
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-azure-extra | Aug 9, 2024 | May 3, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-azureUpgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-gkeop-5.15Upgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-riscv-5.15Upgrade linuxUpgrade linux-awsUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-gcpUpgrade linux-azure-fde-5.15 | Nov 19, 2024 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub