In the Linux kernel, the following vulnerability has been resolved:
dm-bufio: fix sched in atomic context
If "try_verify_in_tasklet" is set for dm-verity, DM_BUFIO_CLIENT_NO_SLEEP is enabled for dm-bufio. However, when bufio tries to evict buffers, there is a chance to trigger scheduling in spin_lock_bh, the following warning is hit:
BUG: sleeping function called from invalid context at drivers/md/dm-bufio.c:2745 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 123, name: kworker/2:2 preempt_count: 201, expected: 0 RCU nest depth: 0, expected: 0 4 locks held by kworker/2:2/123: #0: ffff88800a2d1548 ((wq_completion)dm_bufio_cache){....}-{0:0}, at: process_one_work+0xe46/0x1970 #1: ffffc90000d97d20 ((work_completion)(&dm_bufio_replacement_work)){....}-{0:0}, at: process_one_work+0x763/0x1970 #2: ffffffff8555b528 (dm_bufio_clients_lock){....}-{3:3}, at: do_global_cleanup+0x1ce/0x710 #3: ffff88801d5820b8 (&c->spinlock){....}-{2:2}, at: do_global_cleanup+0x2a5/0x710 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 2 UID: 0 PID: 123 Comm: kworker/2:2 Not tainted 6.16.0-rc3-g90548c634bd0 #305 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 Workqueue: dm_bufio_cache do_global_cleanup Call Trace: <TASK> dump_stack_lvl+0x53/0x70 __might_resched+0x360/0x4e0 do_global_cleanup+0x2f5/0x710 process_one_work+0x7db/0x1970 worker_thread+0x518/0xea0 kthread+0x359/0x690 ret_from_fork+0xf3/0x1b0 ret_from_fork_asm+0x1a/0x30 </TASK>
That can be reproduced by:
veritysetup format --data-block-size=4096 --hash-block-size=4096 /dev/vda /dev/vdb SIZE=$(blockdev --getsz /dev/vda) dmsetup create myverity -r --table "0 $SIZE verity 1 /dev/vda /dev/vdb 4096 4096 <data_blocks> 1 sha256 <root_hash> <salt> 1 try_verify_in_tasklet" mount /dev/dm-0 /mnt -o ro echo 102400 > /sys/module/dm_bufio/parameters/max_cache_size_bytes [read files in /mnt]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-devel | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade dtb-apmUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-hisilicon | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcpUpgrade linux-image-raspi-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gkeopUpgrade linux-image-azure-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1018-raspi | Jul 31, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub