In the Linux kernel, the following vulnerability has been resolved:
i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
Issue reported by customer during SRIOV testing, call trace: When both i40e and the i40iw driver are loaded, a warning in check_flush_dependency is being triggered. This seems to be because of the i40e driver workqueue is allocated with the WQ_MEM_RECLAIM flag, and the i40iw one is not.
Similar error was encountered on ice too and it was fixed by removing the flag. Do the same for i40e too.
[Feb 9 09:08] ------------[ cut here ]------------ [ +0.000004] workqueue: WQ_MEM_RECLAIM i40e:i40e_service_task [i40e] is flushing !WQ_MEM_RECLAIM infiniband:0x0 [ +0.000060] WARNING: CPU: 0 PID: 937 at kernel/workqueue.c:2966 check_flush_dependency+0x10b/0x120 [ +0.000007] Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_timer snd_seq_device snd soundcore nls_utf8 cifs cifs_arc4 nls_ucs2_utils rdma_cm iw_cm ib_cm cifs_md4 dns_resolver netfs qrtr rfkill sunrpc vfat fat intel_rapl_msr intel_rapl_common irdma intel_uncore_frequency intel_uncore_frequency_common ice ipmi_ssif isst_if_common skx_edac nfit libnvdimm x86_pkg_temp_thermal intel_powerclamp gnss coretemp ib_uverbs rapl intel_cstate ib_core iTCO_wdt iTCO_vendor_support acpi_ipmi mei_me ipmi_si intel_uncore ioatdma i2c_i801 joydev pcspkr mei ipmi_devintf lpc_ich intel_pch_thermal i2c_smbus ipmi_msghandler acpi_power_meter acpi_pad xfs libcrc32c ast sd_mod drm_shmem_helper t10_pi drm_kms_helper sg ixgbe drm i40e ahci crct10dif_pclmul libahci crc32_pclmul igb crc32c_intel libata ghash_clmulni_intel i2c_algo_bit mdio dca wmi dm_mirror dm_region_hash dm_log dm_mod fuse [ +0.000050] CPU: 0 PID: 937 Comm: kworker/0:3 Kdump: loaded Not tainted 6.8.0-rc2-Feb-net_dev-Qiueue-00279-gbd43c5687e05 #1 [ +0.000003] Hardware name: Intel Corporation S2600BPB/S2600BPB, BIOS SE5C620.86B.02.01.0013.121520200651 12/15/2020 [ +0.000001] Workqueue: i40e i40e_service_task [i40e] [ +0.000024] RIP: 0010:check_flush_dependency+0x10b/0x120 [ +0.000003] Code: ff 49 8b 54 24 18 48 8d 8b b0 00 00 00 49 89 e8 48 81 c6 b0 00 00 00 48 c7 c7 b0 97 fa 9f c6 05 8a cc 1f 02 01 e8 35 b3 fd ff <0f> 0b e9 10 ff ff ff 80 3d 78 cc 1f 02 00 75 94 e9 46 ff ff ff 90 [ +0.000002] RSP: 0018:ffffbd294976bcf8 EFLAGS: 00010282 [ +0.000002] RAX: 0000000000000000 RBX: ffff94d4c483c000 RCX: 0000000000000027 [ +0.000001] RDX: ffff94d47f620bc8 RSI: 0000000000000001 RDI: ffff94d47f620bc0 [ +0.000001] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffff7fff [ +0.000001] R10: ffffbd294976bb98 R11: ffffffffa0be65e8 R12: ffff94c5451ea180 [ +0.000001] R13: ffff94c5ab5e8000 R14: ffff94c5c20b6e05 R15: ffff94c5f1330ab0 [ +0.000001] FS: 0000000000000000(0000) GS:ffff94d47f600000(0000) knlGS:0000000000000000 [ +0.000002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ +0.000001] CR2: 00007f9e6f1fca70 CR3: 0000000038e20004 CR4: 00000000007706f0 [ +0.000000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ +0.000001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ +0.000001] PKRU: 55555554 [ +0.000001] Call Trace: [ +0.000001] <TASK> [ +0.000002] ? __warn+0x80/0x130 [ +0.000003] ? check_flush_dependency+0x10b/0x120 [ +0.000002] ? report_bug+0x195/0x1a0 [ +0.000005] ? handle_bug+0x3c/0x70 [ +0.000003] ? exc_invalid_op+0x14/0x70 [ +0.000002] ? asm_exc_invalid_op+0x16/0x20 [ +0.000006] ? check_flush_dependency+0x10b/0x120 [ +0.000002] ? check_flush_dependency+0x10b/0x120 [ +0.000002] __flush_workqueue+0x126/0x3f0 [ +0.000015] ib_cache_cleanup_one+0x1c/0xe0 [ib_core] [ +0.000056] __ib_unregister_device+0x6a/0xb0 [ib_core] [ +0.000023] ib_unregister_device_and_put+0x34/0x50 [ib_core] [ +0.000020] i40iw_close+0x4b/0x90 [irdma] [ +0.000022] i40e_notify_client_of_netdev_close+0x54/0xc0 [i40e] [ +0.000035] i40e_service_task+0x126/0x190 [i40e] [ +0.000024] process_one_work+0x174/0x340 [ +0.000003] worker_th ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-docUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rt | Jul 3, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.348-265.562Upgrade python-perfUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-devel | May 21, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 3, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rtUpgrade perfUpgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-devel | Jul 16, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade kernel-sourceUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-amazonUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-develUpgrade dtb-amdUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base | Aug 8, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-232-genericUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1184-azureUpgrade linux-image-oemUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oracle-lts-18.04 | Jul 15, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub