In the Linux kernel, the following vulnerability has been resolved:
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
When a bio with REQ_PREFLUSH is submitted to dm, __send_empty_flush() generates a flush_bio with REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC, which causes the flush_bio to be throttled by wbt_wait().
An example from v5.4, similar problem also exists in upstream:
crash> bt 2091206 PID: 2091206 TASK: ffff2050df92a300 CPU: 109 COMMAND: "kworker/u260:0" #0 [ffff800084a2f7f0] __switch_to at ffff80004008aeb8 #1 [ffff800084a2f820] __schedule at ffff800040bfa0c4 #2 [ffff800084a2f880] schedule at ffff800040bfa4b4 #3 [ffff800084a2f8a0] io_schedule at ffff800040bfa9c4 #4 [ffff800084a2f8c0] rq_qos_wait at ffff8000405925bc #5 [ffff800084a2f940] wbt_wait at ffff8000405bb3a0 #6 [ffff800084a2f9a0] __rq_qos_throttle at ffff800040592254 #7 [ffff800084a2f9c0] blk_mq_make_request at ffff80004057cf38 #8 [ffff800084a2fa60] generic_make_request at ffff800040570138 #9 [ffff800084a2fae0] submit_bio at ffff8000405703b4 #10 [ffff800084a2fb50] xlog_write_iclog at ffff800001280834 [xfs] #11 [ffff800084a2fbb0] xlog_sync at ffff800001280c3c [xfs] #12 [ffff800084a2fbf0] xlog_state_release_iclog at ffff800001280df4 [xfs] #13 [ffff800084a2fc10] xlog_write at ffff80000128203c [xfs] #14 [ffff800084a2fcd0] xlog_cil_push at ffff8000012846dc [xfs] #15 [ffff800084a2fda0] xlog_cil_push_work at ffff800001284a2c [xfs] #16 [ffff800084a2fdb0] process_one_work at ffff800040111d08 #17 [ffff800084a2fe00] worker_thread at ffff8000401121cc #18 [ffff800084a2fe70] kthread at ffff800040118de4
After commit 2def2845cc33 ("xfs: don't allow log IO to be throttled"), the metadata submitted by xlog_write_iclog() should not be throttled. But due to the existence of the dm layer, throttling flush_bio indirectly causes the metadata bio to be throttled.
Fix this by conditionally adding REQ_IDLE to flush_bio.bi_opf, which makes wbt_should_throttle() return false to avoid wbt_wait().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-alteraUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-apple | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gke-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-aws | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub