In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix implicit ODP hang on parent deregistration
Fix the destroy_unused_implicit_child_mr() to prevent hanging during parent deregistration as of below [1].
Upon entering destroy_unused_implicit_child_mr(), the reference count for the implicit MR parent is incremented using: refcount_inc_not_zero().
A corresponding decrement must be performed if free_implicit_child_mr_work() is not called.
The code has been updated to properly manage the reference count that was incremented.
[1] INFO: task python3:2157 blocked for more than 120 seconds. Not tainted 6.12.0-rc7+ #1633 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:python3 state:D stack:0 pid:2157 tgid:2157 ppid:1685 flags:0x00000000 Call Trace: <TASK> __schedule+0x420/0xd30 schedule+0x47/0x130 __mlx5_ib_dereg_mr+0x379/0x5d0 [mlx5_ib] ? __pfx_autoremove_wake_function+0x10/0x10 ib_dereg_mr_user+0x5f/0x120 [ib_core] ? lock_release+0xc6/0x280 destroy_hw_idr_uobject+0x1d/0x60 [ib_uverbs] uverbs_destroy_uobject+0x58/0x1d0 [ib_uverbs] uobj_destroy+0x3f/0x70 [ib_uverbs] ib_uverbs_cmd_verbs+0x3e4/0xbb0 [ib_uverbs] ? __pfx_uverbs_destroy_def_handler+0x10/0x10 [ib_uverbs] ? lock_acquire+0xc1/0x2f0 ? ib_uverbs_ioctl+0xcb/0x170 [ib_uverbs] ? ib_uverbs_ioctl+0x116/0x170 [ib_uverbs] ? lock_release+0xc6/0x280 ib_uverbs_ioctl+0xe7/0x170 [ib_uverbs] ? ib_uverbs_ioctl+0xcb/0x170 [ib_uverbs] __x64_sys_ioctl+0x1b0/0xa70 ? kmem_cache_free+0x221/0x400 do_syscall_64+0x6b/0x140 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f20f21f017b RSP: 002b:00007ffcfc4a77c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007ffcfc4a78d8 RCX: 00007f20f21f017b RDX: 00007ffcfc4a78c0 RSI: 00000000c0181b01 RDI: 0000000000000003 RBP: 00007ffcfc4a78a0 R08: 000056147d125190 R09: 00007f20f1f14c60 R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffcfc4a7890 R13: 000000000000001c R14: 000056147d100fc0 R15: 00007f20e365c9d0 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-devel | Dec 5, 2025 | May 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub