In the Linux kernel, the following vulnerability has been resolved:
IB/cm: Drop lockdep assert and WARN when freeing old msg
The send completion handler can run after cm_id has advanced to another message. The cm_id lock is not needed in this case, but a recent change re-used cm_free_priv_msg(), which asserts that the lock is held and WARNs if the cm_id's currently outstanding msg is different than the one being freed.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-armUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-apple | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oracle-6.14Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1012-azure | Jul 14, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub