In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Correctly move list in sc_disable()
Commit 13bac861952a ("IB/hfi1: Fix abba locking issue with sc_disable()") incorrectly tries to move a list from one list head to another. The result is a kernel crash.
The crash is triggered when a link goes down and there are waiters for a send to complete. The following signature is seen:
BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] Call Trace: sc_disable+0x1ba/0x240 [hfi1] pio_freeze+0x3d/0x60 [hfi1] handle_freeze+0x27/0x1b0 [hfi1] process_one_work+0x1b0/0x380 ? process_one_work+0x380/0x380 worker_thread+0x30/0x360 ? process_one_work+0x380/0x380 kthread+0xd7/0x100 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30
The fix is to use the correct call to move the list.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Sep 25, 2025 | Sep 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-ibm-5.4Upgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linuxUpgrade linux-aws-5.4Upgrade linux-azure-fdeUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-gkeopUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-gcp-5.4Upgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-iotUpgrade linux-azure-5.4Upgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-hwe-5.4 | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub