In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
__xa_store() and __xa_erase() were used without holding the proper lock, which led to a lockdep warning due to unsafe RCU usage. This patch replaces them with xa_store() and xa_erase(), which perform the necessary locking internally.
============================= WARNING: suspicious RCPU usage 6.14.0-rc7_for_upstream_debug_2025_03_18_15_01 #1 Not tainted ----------------------------- ./include/linux/xarray.h:1211 suspicious rcu_dereference_protected() usage!
other info that might help us debug this:
rcu_scheduler_active = 2, debug_locks = 1 3 locks held by kworker/u136:0/219: at: process_one_work+0xbe4/0x15f0 process_one_work+0x75c/0x15f0 pagefault_mr+0x9a5/0x1390 [mlx5_ib]
stack backtrace: CPU: 14 UID: 0 PID: 219 Comm: kworker/u136:0 Not tainted 6.14.0-rc7_for_upstream_debug_2025_03_18_15_01 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: mlx5_ib_page_fault mlx5_ib_eqe_pf_action [mlx5_ib] Call Trace: dump_stack_lvl+0xa8/0xc0 lockdep_rcu_suspicious+0x1e6/0x260 xas_create+0xb8a/0xee0 xas_store+0x73/0x14c0 __xa_store+0x13c/0x220 ? xa_store_range+0x390/0x390 ? spin_bug+0x1d0/0x1d0 pagefault_mr+0xcb5/0x1390 [mlx5_ib] ? _raw_spin_unlock+0x1f/0x30 mlx5_ib_eqe_pf_action+0x3be/0x2620 [mlx5_ib] ? lockdep_hardirqs_on_prepare+0x400/0x400 ? mlx5_ib_invalidate_range+0xcb0/0xcb0 [mlx5_ib] process_one_work+0x7db/0x15f0 ? pwq_dec_nr_in_flight+0xda0/0xda0 ? assign_work+0x168/0x240 worker_thread+0x57d/0xcd0 ? rescuer_thread+0xc40/0xc40 kthread+0x3b3/0x800 ? kthread_is_per_cpu+0xb0/0xb0 ? lock_downgrade+0x680/0x680 ? do_raw_spin_lock+0x12d/0x270 ? spin_bug+0x1d0/0x1d0 ? finish_task_switch.isra.0+0x284/0x9e0 ? lockdep_hardirqs_on_prepare+0x284/0x400 ? kthread_is_per_cpu+0xb0/0xb0 ret_from_fork+0x2d/0x70 ? kthread_is_per_cpu+0xb0/0xb0 ret_from_fork_asm+0x11/0x20
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade kernel-livepatch-6.12.37-61.105Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-develUpgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfo | Sep 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade dtb-socionextUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-sourceUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-rt-extra | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-aws-6.14Upgrade linux-image-genericUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-oem-24.04 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub