In the Linux kernel, the following vulnerability has been resolved:
dm: fix unconditional IO throttle caused by REQ_PREFLUSH
When a bio with REQ_PREFLUSH is submitted to dm, __send_empty_flush() generates a flush_bio with REQ_OP_WRITE | REQ_PREFLUSH | REQ_SYNC, which causes the flush_bio to be throttled by wbt_wait().
An example from v5.4, similar problem also exists in upstream:
crash> bt 2091206 PID: 2091206 TASK: ffff2050df92a300 CPU: 109 COMMAND: "kworker/u260:0" #0 [ffff800084a2f7f0] __switch_to at ffff80004008aeb8 #1 [ffff800084a2f820] __schedule at ffff800040bfa0c4 #2 [ffff800084a2f880] schedule at ffff800040bfa4b4 #3 [ffff800084a2f8a0] io_schedule at ffff800040bfa9c4 #4 [ffff800084a2f8c0] rq_qos_wait at ffff8000405925bc #5 [ffff800084a2f940] wbt_wait at ffff8000405bb3a0 #6 [ffff800084a2f9a0] __rq_qos_throttle at ffff800040592254 #7 [ffff800084a2f9c0] blk_mq_make_request at ffff80004057cf38 #8 [ffff800084a2fa60] generic_make_request at ffff800040570138 #9 [ffff800084a2fae0] submit_bio at ffff8000405703b4 #10 [ffff800084a2fb50] xlog_write_iclog at ffff800001280834 [xfs] #11 [ffff800084a2fbb0] xlog_sync at ffff800001280c3c [xfs] #12 [ffff800084a2fbf0] xlog_state_release_iclog at ffff800001280df4 [xfs] #13 [ffff800084a2fc10] xlog_write at ffff80000128203c [xfs] #14 [ffff800084a2fcd0] xlog_cil_push at ffff8000012846dc [xfs] #15 [ffff800084a2fda0] xlog_cil_push_work at ffff800001284a2c [xfs] #16 [ffff800084a2fdb0] process_one_work at ffff800040111d08 #17 [ffff800084a2fe00] worker_thread at ffff8000401121cc #18 [ffff800084a2fe70] kthread at ffff800040118de4
After commit 2def2845cc33 ("xfs: don't allow log IO to be throttled"), the metadata submitted by xlog_write_iclog() should not be throttled. But due to the existence of the dm layer, throttling flush_bio indirectly causes the metadata bio to be throttled.
Fix this by conditionally adding REQ_IDLE to flush_bio.bi_opf, which makes wbt_should_throttle() return false to avoid wbt_wait().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.31-35.92Upgrade kernel-headersUpgrade perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.141-155.222Upgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade bpftoolUpgrade kernel6.12Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-vdso | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-6.8Upgrade linux-image-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeUpgrade linux-image-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-6.14Upgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04cUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-virtualUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub