In the Linux kernel, the following vulnerability has been resolved:
nbd: fix race between timeout and normal completion
If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered.
Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-livepatch-6.1.112-124.190Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-static | Feb 17, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 14, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Dec 12, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 15, 2025 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-azure | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub