In the Linux kernel, the following vulnerability has been resolved:
RDMA/mad: Improve handling of timed out WRs of mad agent
Current timeout handler of mad agent acquires/releases mad_agent_priv lock for every timed out WRs. This causes heavy locking contention when higher no. of WRs are to be handled inside timeout handler.
This leads to softlockup with below trace in some use cases where rdma-cm path is used to establish connection between peer nodes
Trace: ----- BUG: soft lockup - CPU#4 stuck for 26s! [kworker/u128:3:19767] CPU: 4 PID: 19767 Comm: kworker/u128:3 Kdump: loaded Tainted: G OE ------- --- 5.14.0-427.13.1.el9_4.x86_64 #1 Hardware name: Dell Inc. PowerEdge R740/01YM03, BIOS 2.4.8 11/26/2019 Workqueue: ib_mad1 timeout_sends [ib_core] RIP: 0010:__do_softirq+0x78/0x2ac RSP: 0018:ffffb253449e4f98 EFLAGS: 00000246 RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 000000000000001f RDX: 000000000000001d RSI: 000000003d1879ab RDI: fff363b66fd3a86b RBP: ffffb253604cbcd8 R08: 0000009065635f3b R09: 0000000000000000 R10: 0000000000000040 R11: ffffb253449e4ff8 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000040 FS: 0000000000000000(0000) GS:ffff8caa1fc80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd9ec9db900 CR3: 0000000891934006 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <IRQ> ? show_trace_log_lvl+0x1c4/0x2df ? show_trace_log_lvl+0x1c4/0x2df ? __irq_exit_rcu+0xa1/0xc0 ? watchdog_timer_fn+0x1b2/0x210 ? __pfx_watchdog_timer_fn+0x10/0x10 ? __hrtimer_run_queues+0x127/0x2c0 ? hrtimer_interrupt+0xfc/0x210 ? __sysvec_apic_timer_interrupt+0x5c/0x110 ? sysvec_apic_timer_interrupt+0x37/0x90 ? asm_sysvec_apic_timer_interrupt+0x16/0x20 ? __do_softirq+0x78/0x2ac ? __do_softirq+0x60/0x2ac __irq_exit_rcu+0xa1/0xc0 sysvec_call_function_single+0x72/0x90 </IRQ> <TASK> asm_sysvec_call_function_single+0x16/0x20 RIP: 0010:_raw_spin_unlock_irq+0x14/0x30 RSP: 0018:ffffb253604cbd88 EFLAGS: 00000247 RAX: 000000000001960d RBX: 0000000000000002 RCX: ffff8cad2a064800 RDX: 000000008020001b RSI: 0000000000000001 RDI: ffff8cad5d39f66c RBP: ffff8cad5d39f600 R08: 0000000000000001 R09: 0000000000000000 R10: ffff8caa443e0c00 R11: ffffb253604cbcd8 R12: ffff8cacb8682538 R13: 0000000000000005 R14: ffffb253604cbd90 R15: ffff8cad5d39f66c cm_process_send_error+0x122/0x1d0 [ib_cm] timeout_sends+0x1dd/0x270 [ib_core] process_one_work+0x1e2/0x3b0 ? __pfx_worker_thread+0x10/0x10 worker_thread+0x50/0x3a0 ? __pfx_worker_thread+0x10/0x10 kthread+0xdd/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x29/0x50 </TASK>
Simplified timeout handler by creating local list of timed out WRs and invoke send handler post creating the list. The new method acquires/ releases lock once to fetch the list and hence helps to reduce locking contetiong when processing higher no. of WRs
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.227-219.884Upgrade perfUpgrade bpftoolUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-aarch64 | Mar 14, 2025 | Nov 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-modules-extra-common | Mar 27, 2025 | Nov 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 5, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 11, 2025 | Nov 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Feb 11, 2025 | Nov 5, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-5.4Upgrade linux-image-5.4.0-1099-ibmUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1127-fipsUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1057-iotUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1071-xilinx-zynqmpUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-fips-4.15Upgrade linux-image-aws-fips-5.4Upgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-fips-5.4Upgrade linux-image-virtual-5.4Upgrade linux-image-5.4.0-224-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-azure-fips-5.4Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcp-5.4Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1140-kvmUpgrade linux-image-5.4.0-1156-azureUpgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-raspi-5.4Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-5.4.0-1153-awsUpgrade linux-image-ibm-5.4Upgrade linux-image-snapdragon-5.4Upgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1195-azureUpgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-5.4.0-224-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.4.0-1156-gcpUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-azure-fips-4.15Upgrade linux-image-azure-5.4Upgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-5.4.0-1153-aws-fipsUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-4.4.0-1188-awsUpgrade linux-image-oem-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-aws-4.15Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-1151-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-azure-4.15Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-5.4Upgrade linux-image-5.4.0-224-generic-lpaeUpgrade linux-image-5.4.0-1157-azure-fipsUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-oemUpgrade linux-image-oracle-4.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-5.4.0-1156-gcp-fipsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-4.4.0-276-genericUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1136-raspiUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-gcp-4.15Upgrade linux-image-kvm-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-2104-azure-fips | Dec 18, 2024 | Nov 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub