In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Correctly move list in sc_disable()
Commit 13bac861952a ("IB/hfi1: Fix abba locking issue with sc_disable()") incorrectly tries to move a list from one list head to another. The result is a kernel crash.
The crash is triggered when a link goes down and there are waiters for a send to complete. The following signature is seen:
BUG: kernel NULL pointer dereference, address: 0000000000000030 [...] Call Trace: sc_disable+0x1ba/0x240 [hfi1] pio_freeze+0x3d/0x60 [hfi1] handle_freeze+0x27/0x1b0 [hfi1] process_one_work+0x1b0/0x380 ? process_one_work+0x380/0x380 worker_thread+0x30/0x360 ? process_one_work+0x380/0x380 kthread+0xd7/0x100 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30
The fix is to use the correct call to move the list.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Sep 25, 2025 | Sep 15, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.15Upgrade linux-fipsUpgrade linux-azure-fdeUpgrade linux-lowlatencyUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-ibm-5.4Upgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-azure-5.4Upgrade linux-azure-5.15Upgrade linux-gcp-5.4Upgrade linux-iotUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-aws-fipsUpgrade linux-hwe-5.15Upgrade linux-azure-fips | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub