In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows:
conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler;
rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.353-270.569Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.224-212.876Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.15.165-110.161 | Mar 10, 2025 | Aug 17, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 7, 2025 | Aug 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.106-116.188Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perf-debuginfo | Mar 10, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Nov 26, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-headers | Jan 21, 2025 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-azure-baseUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-manUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade dtb-qcomUpgrade dtb-hisilicon | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64k | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub