In the Linux kernel, the following vulnerability has been resolved:
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
syzbot is reporting lockdep warning at rds_tcp_reset_callbacks() [1], for commit ac3615e7f3cffe2a ("RDS: TCP: Reduce code duplication in rds_tcp_reset_callbacks()") added cancel_delayed_work_sync() into a section protected by lock_sock() without realizing that rds_send_xmit() might call lock_sock().
We don't need to protect cancel_delayed_work_sync() using lock_sock(), for even if rds_{send,recv}_worker() re-queued this work while __flush_work() from cancel_delayed_work_sync() was waiting for this work to complete, retried rds_{send,recv}_worker() is no-op due to the absence of RDS_CONN_UP bit.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-develUpgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.75-48.135Upgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-gkeUpgrade linux-aws-hweUpgrade linux-xilinx-zynqmpUpgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-oracle-5.15Upgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-azure-4.15Upgrade linux-ibmUpgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-azure-5.15Upgrade linux-gcp-5.15Upgrade linux-iotUpgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub