In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix implicit ODP hang on parent deregistration
Fix the destroy_unused_implicit_child_mr() to prevent hanging during parent deregistration as of below [1].
Upon entering destroy_unused_implicit_child_mr(), the reference count for the implicit MR parent is incremented using: refcount_inc_not_zero().
A corresponding decrement must be performed if free_implicit_child_mr_work() is not called.
The code has been updated to properly manage the reference count that was incremented.
[1] INFO: task python3:2157 blocked for more than 120 seconds. Not tainted 6.12.0-rc7+ #1633 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:python3 state:D stack:0 pid:2157 tgid:2157 ppid:1685 flags:0x00000000 Call Trace: <TASK> __schedule+0x420/0xd30 schedule+0x47/0x130 __mlx5_ib_dereg_mr+0x379/0x5d0 [mlx5_ib] ? __pfx_autoremove_wake_function+0x10/0x10 ib_dereg_mr_user+0x5f/0x120 [ib_core] ? lock_release+0xc6/0x280 destroy_hw_idr_uobject+0x1d/0x60 [ib_uverbs] uverbs_destroy_uobject+0x58/0x1d0 [ib_uverbs] uobj_destroy+0x3f/0x70 [ib_uverbs] ib_uverbs_cmd_verbs+0x3e4/0xbb0 [ib_uverbs] ? __pfx_uverbs_destroy_def_handler+0x10/0x10 [ib_uverbs] ? lock_acquire+0xc1/0x2f0 ? ib_uverbs_ioctl+0xcb/0x170 [ib_uverbs] ? ib_uverbs_ioctl+0x116/0x170 [ib_uverbs] ? lock_release+0xc6/0x280 ib_uverbs_ioctl+0xe7/0x170 [ib_uverbs] ? ib_uverbs_ioctl+0xcb/0x170 [ib_uverbs] __x64_sys_ioctl+0x1b0/0xa70 ? kmem_cache_free+0x221/0x400 do_syscall_64+0x6b/0x140 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f20f21f017b RSP: 002b:00007ffcfc4a77c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ffcfc4a78d8 RCX: 00007f20f21f017b RDX: 00007ffcfc4a78c0 RSI: 00000000c0181b01 RDI: 0000000000000003 RBP: 00007ffcfc4a78a0 R08: 000056147d125190 R09: 00007f20f1f14c60 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffcfc4a7890 R13: 000000000000001c R14: 000056147d100fc0 R15: 00007f20e365c9d0 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-64kb-optional | Dec 5, 2025 | May 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub