In the Linux kernel, the following vulnerability has been resolved:
nvme: move stopping keep-alive into nvme_uninit_ctrl()
Commit 4733b65d82bd ("nvme: start keep-alive after admin queue setup") moves starting keep-alive from nvme_start_ctrl() into nvme_init_ctrl_finish(), but don't move stopping keep-alive into nvme_uninit_ctrl(), so keep-alive work can be started and keep pending after failing to start controller, finally use-after-free is triggered if nvme host driver is unloaded.
This patch fixes kernel panic when running nvme/004 in case that connection failure is triggered, by moving stopping keep-alive into nvme_uninit_ctrl().
This way is reasonable because keep-alive is now started in nvme_init_ctrl_finish().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 11, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optional | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-24.04 | Dec 13, 2024 | Sep 11, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub