In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows:
conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler;
rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.224-212.876Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.353-270.569Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.165-110.161Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Mar 10, 2025 | Aug 17, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 7, 2025 | Aug 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-toolsUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headers | Mar 10, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Nov 26, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perf | Jan 21, 2025 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-azure-baseUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-default-base | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-genericUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-lts-22.04 | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub