In the Linux kernel, the following vulnerability has been resolved:
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
When a bio with REQ_PREFLUSH is submitted to dm, __send_empty_flush() generates a flush_bio with REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC, which causes the flush_bio to be throttled by wbt_wait().
An example from v5.4, similar problem also exists in upstream:
crash> bt 2091206 PID: 2091206 TASK: ffff2050df92a300 CPU: 109 COMMAND: "kworker/u260:0" #0 [ffff800084a2f7f0] __switch_to at ffff80004008aeb8 #1 [ffff800084a2f820] __schedule at ffff800040bfa0c4 #2 [ffff800084a2f880] schedule at ffff800040bfa4b4 #3 [ffff800084a2f8a0] io_schedule at ffff800040bfa9c4 #4 [ffff800084a2f8c0] rq_qos_wait at ffff8000405925bc #5 [ffff800084a2f940] wbt_wait at ffff8000405bb3a0 #6 [ffff800084a2f9a0] __rq_qos_throttle at ffff800040592254 #7 [ffff800084a2f9c0] blk_mq_make_request at ffff80004057cf38 #8 [ffff800084a2fa60] generic_make_request at ffff800040570138 #9 [ffff800084a2fae0] submit_bio at ffff8000405703b4 #10 [ffff800084a2fb50] xlog_write_iclog at ffff800001280834 [xfs] #11 [ffff800084a2fbb0] xlog_sync at ffff800001280c3c [xfs] #12 [ffff800084a2fbf0] xlog_state_release_iclog at ffff800001280df4 [xfs] #13 [ffff800084a2fc10] xlog_write at ffff80000128203c [xfs] #14 [ffff800084a2fcd0] xlog_cil_push at ffff8000012846dc [xfs] #15 [ffff800084a2fda0] xlog_cil_push_work at ffff800001284a2c [xfs] #16 [ffff800084a2fdb0] process_one_work at ffff800040111d08 #17 [ffff800084a2fe00] worker_thread at ffff8000401121cc #18 [ffff800084a2fe70] kthread at ffff800040118de4
After commit 2def2845cc33 ("xfs: don't allow log IO to be throttled"), the metadata submitted by xlog_write_iclog() should not be throttled. But due to the existence of the dm layer, throttling flush_bio indirectly causes the metadata bio to be throttled.
Fix this by conditionally adding REQ_IDLE to flush_bio.bi_opf, which makes wbt_should_throttle() return false to avoid wbt_wait().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.31-35.92Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-debugUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade dtb-allwinner | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-virtualUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-azureUpgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gke-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-intel-iot-realtime | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub