In the Linux kernel, the following vulnerability has been resolved:
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
When a bio with REQ_PREFLUSH is submitted to dm, __send_empty_flush() generates a flush_bio with REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC, which causes the flush_bio to be throttled by wbt_wait().
An example from v5.4, similar problem also exists in upstream:
crash> bt 2091206 PID: 2091206 TASK: ffff2050df92a300 CPU: 109 COMMAND: "kworker/u260:0" #0 [ffff800084a2f7f0] __switch_to at ffff80004008aeb8 #1 [ffff800084a2f820] __schedule at ffff800040bfa0c4 #2 [ffff800084a2f880] schedule at ffff800040bfa4b4 #3 [ffff800084a2f8a0] io_schedule at ffff800040bfa9c4 #4 [ffff800084a2f8c0] rq_qos_wait at ffff8000405925bc #5 [ffff800084a2f940] wbt_wait at ffff8000405bb3a0 #6 [ffff800084a2f9a0] __rq_qos_throttle at ffff800040592254 #7 [ffff800084a2f9c0] blk_mq_make_request at ffff80004057cf38 #8 [ffff800084a2fa60] generic_make_request at ffff800040570138 #9 [ffff800084a2fae0] submit_bio at ffff8000405703b4 #10 [ffff800084a2fb50] xlog_write_iclog at ffff800001280834 [xfs] #11 [ffff800084a2fbb0] xlog_sync at ffff800001280c3c [xfs] #12 [ffff800084a2fbf0] xlog_state_release_iclog at ffff800001280df4 [xfs] #13 [ffff800084a2fc10] xlog_write at ffff80000128203c [xfs] #14 [ffff800084a2fcd0] xlog_cil_push at ffff8000012846dc [xfs] #15 [ffff800084a2fda0] xlog_cil_push_work at ffff800001284a2c [xfs] #16 [ffff800084a2fdb0] process_one_work at ffff800040111d08 #17 [ffff800084a2fe00] worker_thread at ffff8000401121cc #18 [ffff800084a2fe70] kthread at ffff800040118de4
After commit 2def2845cc33 ("xfs: don't allow log IO to be throttled"), the metadata submitted by xlog_write_iclog() should not be throttled. But due to the existence of the dm layer, throttling flush_bio indirectly causes the metadata bio to be throttled.
Fix this by conditionally adding REQ_IDLE to flush_bio.bi_opf, which makes wbt_should_throttle() return false to avoid wbt_wait().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernelUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.141-155.222Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perf6.12-debuginfoUpgrade python3-perf | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-default-baseUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuild | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-oem-24.04cUpgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-xilinxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub