In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix double free in rxe_srq_from_init
In rxe_srq_from_init(), the queue pointer 'q' is assigned to 'srq->rq.queue' before copying the SRQ number to user space. If copy_to_user() fails, the function calls rxe_queue_cleanup() to free the queue, but leaves the now-invalid pointer in 'srq->rq.queue'.
The caller of rxe_srq_from_init() (rxe_create_srq) eventually calls rxe_srq_cleanup() upon receiving the error, which triggers a second rxe_queue_cleanup() on the same memory, leading to a double free.
The call trace looks like this: kmem_cache_free+0x.../0x... rxe_queue_cleanup+0x1a/0x30 [rdma_rxe] rxe_srq_cleanup+0x42/0x60 [rdma_rxe] rxe_elem_release+0x31/0x70 [rdma_rxe] rxe_create_srq+0x12b/0x1a0 [rdma_rxe] ib_create_srq_user+0x9a/0x150 [ib_core]
Fix this by moving 'srq->rq.queue = q' after copy_to_user.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-headersUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-docUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-modulesUpgrade kernel-coreUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel | Jun 16, 2026 | Jun 10, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.252-250.992Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python-perf | Jun 17, 2026 | Jun 17, 2026 |
| Debian | — | Upgrade linux | May 28, 2026 | May 28, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 12, 2026 | May 27, 2026 |
| Rocky_linux | — | Upgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfoUpgrade rtlaUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-modulesUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extra | Jun 17, 2026 | Jun 13, 2026 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-azure-fde-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-134-genericUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-virtualUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-6.8 | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 12, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub