In the Linux kernel, the following vulnerability has been resolved:
nbd: fix race between timeout and normal completion
If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered.
Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.112-124.190Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-develUpgrade kernel-libbpf-static | Feb 17, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jan 14, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Dec 12, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Jan 15, 2025 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1010-lowlatency-64k | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub