In the Linux kernel, the following vulnerability has been resolved:
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
syzbot is reporting lockdep warning at rds_tcp_reset_callbacks() [1], for commit ac3615e7f3cffe2a ("RDS: TCP: Reduce code duplication in rds_tcp_reset_callbacks()") added cancel_delayed_work_sync() into a section protected by lock_sock() without realizing that rds_send_xmit() might call lock_sock().
We don't need to protect cancel_delayed_work_sync() using lock_sock(), for even if rds_{send,recv}_worker() re-queued this work while __flush_work() from cancel_delayed_work_sync() was waiting for this work to complete, retried rds_{send,recv}_worker() is no-op due to the absence of RDS_CONN_UP bit.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-develUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-awsUpgrade linux-aws-5.15Upgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-gkeUpgrade linux-aws-hweUpgrade linuxUpgrade linux-riscv-5.15Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-ibm-5.4Upgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-4.15Upgrade linux-iotUpgrade linux-gcp-5.15Upgrade linux-azure-4.15Upgrade linux-ibmUpgrade linux-raspi-5.4Upgrade linux-aws-fipsUpgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-bluefield | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub