In the Linux kernel, the following vulnerability has been resolved:
RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
In the commit aee2424246f9 ("RDMA/iwcm: Fix a use-after-free related to destroying CM IDs"), the function flush_workqueue is invoked to flush the work queue iwcm_wq.
But at that time, the work queue iwcm_wq was created via the function alloc_ordered_workqueue without the flag WQ_MEM_RECLAIM.
Because the current process is trying to flush the whole iwcm_wq, if iwcm_wq doesn't have the flag WQ_MEM_RECLAIM, verify that the current process is not reclaiming memory or running on a workqueue which doesn't have the flag WQ_MEM_RECLAIM as that can break forward-progress guarantee leading to a deadlock.
The call trace is as below:
[ 125.350876][ T1430] Call Trace: [ 125.356281][ T1430] <TASK> [ 125.361285][ T1430] ? __warn (kernel/panic.c:693) [ 125.367640][ T1430] ? check_flush_dependency (kernel/workqueue.c:3706 (discriminator 9)) [ 125.375689][ T1430] ? report_bug (lib/bug.c:180 lib/bug.c:219) [ 125.382505][ T1430] ? handle_bug (arch/x86/kernel/traps.c:239) [ 125.388987][ T1430] ? exc_invalid_op (arch/x86/kernel/traps.c:260 (discriminator 1)) [ 125.395831][ T1430] ? asm_exc_invalid_op (arch/x86/include/asm/idtentry.h:621) [ 125.403125][ T1430] ? check_flush_dependency (kernel/workqueue.c:3706 (discriminator 9)) [ 125.410984][ T1430] ? check_flush_dependency (kernel/workqueue.c:3706 (discriminator 9)) [ 125.418764][ T1430] __flush_workqueue (kernel/workqueue.c:3970) [ 125.426021][ T1430] ? __pfx___might_resched (kernel/sched/core.c:10151) [ 125.433431][ T1430] ? destroy_cm_id (drivers/infiniband/core/iwcm.c:375) iw_cm [ 125.441209][ T1430] ? __pfx___flush_workqueue (kernel/workqueue.c:3910) [ 125.473900][ T1430] ? _raw_spin_lock_irqsave (arch/x86/include/asm/atomic.h:107 include/linux/atomic/atomic-arch-fallback.h:2170 include/linux/atomic/atomic-instrumented.h:1302 include/asm-generic/qspinlock.h:111 include/linux/spinlock.h:187 include/linux/spinlock_api_smp.h:111 kernel/locking/spinlock.c:162) [ 125.473909][ T1430] ? __pfx__raw_spin_lock_irqsave (kernel/locking/spinlock.c:161) [ 125.482537][ T1430] _destroy_id (drivers/infiniband/core/cma.c:2044) rdma_cm [ 125.495072][ T1430] nvme_rdma_free_queue (drivers/nvme/host/rdma.c:656 drivers/nvme/host/rdma.c:650) nvme_rdma [ 125.505827][ T1430] nvme_rdma_reset_ctrl_work (drivers/nvme/host/rdma.c:2180) nvme_rdma [ 125.505831][ T1430] process_one_work (kernel/workqueue.c:3231) [ 125.515122][ T1430] worker_thread (kernel/workqueue.c:3306 kernel/workqueue.c:3393) [ 125.515127][ T1430] ? __pfx_worker_thread (kernel/workqueue.c:3339) [ 125.531837][ T1430] kthread (kernel/kthread.c:389) [ 125.539864][ T1430] ? __pfx_kthread (kernel/kthread.c:342) [ 125.550628][ T1430] ret_from_fork (arch/x86/kernel/process.c:147) [ 125.558840][ T1430] ? __pfx_kthread (kernel/kthread.c:342) [ 125.558844][ T1430] ret_from_fork_asm (arch/x86/entry/entry_64.S:257) [ 125.566487][ T1430] </TASK> [ 125.566488][ T1430] ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 14, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 15, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 9, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-azure-cvm | Dec 18, 2024 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub