In the Linux kernel, the following vulnerability has been resolved:
i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
Issue reported by customer during SRIOV testing, call trace: When both i40e and the i40iw driver are loaded, a warning in check_flush_dependency is being triggered. This seems to be because of the i40e driver workqueue is allocated with the WQ_MEM_RECLAIM flag, and the i40iw one is not.
Similar error was encountered on ice too and it was fixed by removing the flag. Do the same for i40e too.
[Feb 9 09:08] ------------[ cut here ]------------ [ +0.000004] workqueue: WQ_MEM_RECLAIM i40e:i40e_service_task [i40e] is flushing !WQ_MEM_RECLAIM infiniband:0x0 [ +0.000060] WARNING: CPU: 0 PID: 937 at kernel/workqueue.c:2966 check_flush_dependency+0x10b/0x120 [ +0.000007] Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_timer snd_seq_device snd soundcore nls_utf8 cifs cifs_arc4 nls_ucs2_utils rdma_cm iw_cm ib_cm cifs_md4 dns_resolver netfs qrtr rfkill sunrpc vfat fat intel_rapl_msr intel_rapl_common irdma intel_uncore_frequency intel_uncore_frequency_common ice ipmi_ssif isst_if_common skx_edac nfit libnvdimm x86_pkg_temp_thermal intel_powerclamp gnss coretemp ib_uverbs rapl intel_cstate ib_core iTCO_wdt iTCO_vendor_support acpi_ipmi mei_me ipmi_si intel_uncore ioatdma i2c_i801 joydev pcspkr mei ipmi_devintf lpc_ich intel_pch_thermal i2c_smbus ipmi_msghandler acpi_power_meter acpi_pad xfs libcrc32c ast sd_mod drm_shmem_helper t10_pi drm_kms_helper sg ixgbe drm i40e ahci crct10dif_pclmul libahci crc32_pclmul igb crc32c_intel libata ghash_clmulni_intel i2c_algo_bit mdio dca wmi dm_mirror dm_region_hash dm_log dm_mod fuse [ +0.000050] CPU: 0 PID: 937 Comm: kworker/0:3 Kdump: loaded Not tainted 6.8.0-rc2-Feb-net_dev-Qiueue-00279-gbd43c5687e05 #1 [ +0.000003] Hardware name: Intel Corporation S2600BPB/S2600BPB, BIOS SE5C620.86B.02.01.0013.121520200651 12/15/2020 [ +0.000001] Workqueue: i40e i40e_service_task [i40e] [ +0.000024] RIP: 0010:check_flush_dependency+0x10b/0x120 [ +0.000003] Code: ff 49 8b 54 24 18 48 8d 8b b0 00 00 00 49 89 e8 48 81 c6 b0 00 00 00 48 c7 c7 b0 97 fa 9f c6 05 8a cc 1f 02 01 e8 35 b3 fd ff <0f> 0b e9 10 ff ff ff 80 3d 78 cc 1f 02 00 75 94 e9 46 ff ff ff 90 [ +0.000002] RSP: 0018:ffffbd294976bcf8 EFLAGS: 00010282 [ +0.000002] RAX: 0000000000000000 RBX: ffff94d4c483c000 RCX: 0000000000000027 [ +0.000001] RDX: ffff94d47f620bc8 RSI: 0000000000000001 RDI: ffff94d47f620bc0 [ +0.000001] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffff7fff [ +0.000001] R10: ffffbd294976bb98 R11: ffffffffa0be65e8 R12: ffff94c5451ea180 [ +0.000001] R13: ffff94c5ab5e8000 R14: ffff94c5c20b6e05 R15: ffff94c5f1330ab0 [ +0.000001] FS: 0000000000000000(0000) GS:ffff94d47f600000(0000) knlGS:0000000000000000 [ +0.000002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ +0.000001] CR2: 00007f9e6f1fca70 CR3: 0000000038e20004 CR4: 00000000007706f0 [ +0.000000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ +0.000001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ +0.000001] PKRU: 55555554 [ +0.000001] Call Trace: [ +0.000001] <TASK> [ +0.000002] ? __warn+0x80/0x130 [ +0.000003] ? check_flush_dependency+0x10b/0x120 [ +0.000002] ? report_bug+0x195/0x1a0 [ +0.000005] ? handle_bug+0x3c/0x70 [ +0.000003] ? exc_invalid_op+0x14/0x70 [ +0.000002] ? asm_exc_invalid_op+0x16/0x20 [ +0.000006] ? check_flush_dependency+0x10b/0x120 [ +0.000002] ? check_flush_dependency+0x10b/0x120 [ +0.000002] __flush_workqueue+0x126/0x3f0 [ +0.000015] ib_cache_cleanup_one+0x1c/0xe0 [ib_core] [ +0.000056] __ib_unregister_device+0x6a/0xb0 [ib_core] [ +0.000023] ib_unregister_device_and_put+0x34/0x50 [ib_core] [ +0.000020] i40iw_close+0x4b/0x90 [irdma] [ +0.000022] i40e_notify_client_of_netdev_close+0x54/0xc0 [i40e] [ +0.000035] i40e_service_task+0x126/0x190 [i40e] [ +0.000024] process_one_work+0x174/0x340 [ +0.000003] worker_th ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade perfUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-abi-stablelists | Jul 3, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.348-265.562Upgrade python-perfUpgrade kernel | May 21, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfo | Jul 16, 2024 | May 20, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-azure-baseUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dlm-kmp-64kb | Aug 8, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oemUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-4.15.0-1184-azure | Jul 15, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub