In the Linux kernel, the following vulnerability has been resolved:
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
When a bio with REQ_PREFLUSH is submitted to dm, __send_empty_flush() generates a flush_bio with REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC, which causes the flush_bio to be throttled by wbt_wait().
An example from v5.4, similar problem also exists in upstream:
crash> bt 2091206 PID: 2091206 TASK: ffff2050df92a300 CPU: 109 COMMAND: "kworker/u260:0" #0 [ffff800084a2f7f0] __switch_to at ffff80004008aeb8 #1 [ffff800084a2f820] __schedule at ffff800040bfa0c4 #2 [ffff800084a2f880] schedule at ffff800040bfa4b4 #3 [ffff800084a2f8a0] io_schedule at ffff800040bfa9c4 #4 [ffff800084a2f8c0] rq_qos_wait at ffff8000405925bc #5 [ffff800084a2f940] wbt_wait at ffff8000405bb3a0 #6 [ffff800084a2f9a0] __rq_qos_throttle at ffff800040592254 #7 [ffff800084a2f9c0] blk_mq_make_request at ffff80004057cf38 #8 [ffff800084a2fa60] generic_make_request at ffff800040570138 #9 [ffff800084a2fae0] submit_bio at ffff8000405703b4 #10 [ffff800084a2fb50] xlog_write_iclog at ffff800001280834 [xfs] #11 [ffff800084a2fbb0] xlog_sync at ffff800001280c3c [xfs] #12 [ffff800084a2fbf0] xlog_state_release_iclog at ffff800001280df4 [xfs] #13 [ffff800084a2fc10] xlog_write at ffff80000128203c [xfs] #14 [ffff800084a2fcd0] xlog_cil_push at ffff8000012846dc [xfs] #15 [ffff800084a2fda0] xlog_cil_push_work at ffff800001284a2c [xfs] #16 [ffff800084a2fdb0] process_one_work at ffff800040111d08 #17 [ffff800084a2fe00] worker_thread at ffff8000401121cc #18 [ffff800084a2fe70] kthread at ffff800040118de4
After commit 2def2845cc33 ("xfs: don't allow log IO to be throttled"), the metadata submitted by xlog_write_iclog() should not be throttled. But due to the existence of the dm layer, throttling flush_bio indirectly causes the metadata bio to be throttled.
Fix this by conditionally adding REQ_IDLE to flush_bio.bi_opf, which makes wbt_should_throttle() return false to avoid wbt_wait().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.1.141-155.222Upgrade perfUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.31-35.92Upgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-debuginfoUpgrade python3-perf6.12Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftool | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-6.8Upgrade linux-image-kvmUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinxUpgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-6.8Upgrade linux-image-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-gke | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub