In the Linux kernel, the following vulnerability has been resolved:
io_uring/rsrc: don't lock while !TASK_RUNNING
There is a report of io_rsrc_ref_quiesce() locking a mutex while not TASK_RUNNING, which is due to forgetting restoring the state back after io_run_task_work_sig() and attempts to break out of the waiting loop.
do not call blocking ops when !TASK_RUNNING; state=1 set at [<ffffffff815d2494>] prepare_to_wait+0xa4/0x380 kernel/sched/wait.c:237 WARNING: CPU: 2 PID: 397056 at kernel/sched/core.c:10099 __might_sleep+0x114/0x160 kernel/sched/core.c:10099 RIP: 0010:__might_sleep+0x114/0x160 kernel/sched/core.c:10099 Call Trace: <TASK> __mutex_lock_common kernel/locking/mutex.c:585 [inline] __mutex_lock+0xb4/0x940 kernel/locking/mutex.c:752 io_rsrc_ref_quiesce+0x590/0x940 io_uring/rsrc.c:253 io_sqe_buffers_unregister+0xa2/0x340 io_uring/rsrc.c:799 __io_uring_register io_uring/register.c:424 [inline] __do_sys_io_uring_register+0x5b9/0x2400 io_uring/register.c:613 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd8/0x270 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x6f/0x77
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-debug-vdso | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-gke | Sep 12, 2024 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub