In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows:
conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler;
rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.224-212.876Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.353-270.569 | Mar 10, 2025 | Aug 17, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 7, 2025 | Aug 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.106-116.188Upgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | Mar 10, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Nov 26, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade perf | Jan 21, 2025 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-socionext | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04 | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub