جزئیات آسیبپذیری
CVE-2025-21829
RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
شرح رسمی (انگلیسی)
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" The Call Trace is as below: " <TASK> ? show_regs.cold+0x1a/0x1f ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __warn+0x84/0xd0 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? report_bug+0x105/0x180 ? handle_bug+0x46/0x80 ? exc_invalid_op+0x19/0x70 ? asm_exc_invalid_op+0x1b/0x20 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __rxe_cleanup+0x124/0x170 [rdma_rxe] rxe_destroy_qp.cold+0x24/0x29 [rdma_rxe] ib_destroy_qp_user+0x118/0x190 [ib_core] rdma_destroy_qp.cold+0x43/0x5e [rdma_cm] rtrs_cq_qp_destroy.cold+0x1d/0x2b [rtrs_core] rtrs_srv_close_work.cold+0x1b/0x31 [rtrs_server] process_one_work+0x21d/0x3f0 worker_thread+0x4a/0x3c0 ? process_one_work+0x3f0/0x3f0 kthread+0xf0/0x120 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x22/0x30 </TASK> " When too many rdma resources are allocated, rxe needs more time to handle these rdma resources. Sometimes with the current timeout, rxe can not release the rdma resources correctly. Compared with other rdma drivers, a bigger timeout is used.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.8بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Linux | Linux | 6.0 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 215d0a755e1bcd92cbe6a71a21194ce7c82ec106 ≤ v < 720653309dd31c8a927ef5d87964578ad544980f | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 215d0a755e1bcd92cbe6a71a21194ce7c82ec106 ≤ v < 45e567800492088bc52c9abac35524b4d332a8f8 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 215d0a755e1bcd92cbe6a71a21194ce7c82ec106 ≤ v < 7a2de8126ed3801f2396720e10a03cd546a3cea1 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 215d0a755e1bcd92cbe6a71a21194ce7c82ec106 ≤ v < a7d15eaecf0d6e13226db629ae2401c8c02683e5 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 215d0a755e1bcd92cbe6a71a21194ce7c82ec106 ≤ v < edc4ef0e0154096d6c0cf5e06af6fc330dbad9d1 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۶- https://git.kernel.org/stable/c/720653309dd31c8a927ef5d87964578ad544980f
- https://git.kernel.org/stable/c/45e567800492088bc52c9abac35524b4d332a8f8
- https://git.kernel.org/stable/c/7a2de8126ed3801f2396720e10a03cd546a3cea1
- https://git.kernel.org/stable/c/a7d15eaecf0d6e13226db629ae2401c8c02683e5
- https://git.kernel.org/stable/c/edc4ef0e0154096d6c0cf5e06af6fc330dbad9d1
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
اطلاعات
- تاریخ انتشار
- ۱۴۰۳/۱۲/۱۶
- آخرین بهروزرسانی
- ۱۴۰۵/۰۵/۱۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Linux
پیشبینی بهرهبرداری (EPSS)
ضعفها (CWE)
- —