From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E544C40F73A for ; Thu, 24 Sep 2026 16:28:00 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790267282; cv=none; b=dQMA9fn3IyNXyMMAqg8XRFg86BFhwjMWHZW3DvjWdt5YpUx+pRciO6GNr3gEUZmZk9LJqC8RCtDrAqZWOcpGMN4t/IBeYFXbJxUPoWIl8DVv7r80t+qKDjok87ZMXP4j9DhPdH9MLNtPgprVoEHiGVV96BMjPtWk+aM0jJN9bRw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790267282; c=relaxed/simple; bh=CXxsEYOL+74+nlM24TpohQjIlhxDPk9fOvsK5HXM7Lw=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=St5hwOG/FLYpFraP5NkVFVoxinr+y0D835YjfX32Nbqh77L/9XE9XZHL6geADxSQl8TZhcHAo2dPCCqfexRYvC5Dzku/6aN6/hhu7q3fJL7mNHloVpD1lfhwFYfEv4OeDxeZUBIvcext6z3t22PtiGQbezrCm0D54iJUwx7xDUQ= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=CqDW3vMw; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="CqDW3vMw" Received: by smtp.kernel.org (Postfix) with ESMTPSA id C3E3F1F000FF; Thu, 24 Sep 2026 16:27:59 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1790267280; bh=78W5ojZufIHYE6ei6PAK0debvflLT84JwmNtoYW2K0A=; h=From:To:Cc:Subject:Date:Reply-To; b=CqDW3vMwgLxQBi6P61dqqK0WgjM84Xfjo5uOerONxQP2TA96m/kK4C9hzEOrqv48L RA2XU+eP0R0EYlYHCWLYZSCXppZGf7efcmNJEjzLAM/2GhJaUL5OoeL3GUEs0Flkb6 fwstAWcPOAqvj7fTSMfb6KTWJX72zrqde/N3nOeE= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown Date: Thu, 24 Sep 2026 18:04:16 +0200 Message-ID: <2026092439-CVE-2026-97491-e270@gregkh> X-Mailer: git-send-email 2.55.0 Reply-To: , Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=2041; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=YWq5RVdfSptq9Sajw1s4EinHutfpeBh+93j6mQgA18I=; b=owGbwMvMwCRo6H6F97bub03G02pJDFlbPedvy6iwTivrzfevET6X5ujjz/XCX4rDed7J7QZb8 p4fc3vREcvCIMjEICumyPJlG8/R/RWHFL0MbU/DzGFlAhnCwMUpABOpXMqwYLuOtIzS7CRNM6Xc 4xPmC5f/Xq60iWF+4hLXF+9KQoy8HaIWmL+q4a/jaNkLAA== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit From: Greg Kroah-Hartman Description =========== In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait_event call, which blocks other work items in the queue. Fix this by changing wait_event to wait_event timeout, and looping until the wait check succeeds. The Linux kernel CVE team has assigned CVE-2026-97491 to this issue. Affected and fixed versions =========================== Fixed in 6.12.111 with commit db22e77df66353f1299153f6fa9620a2825bc63f Fixed in 6.18.53 with commit caa51e6da596ed6008cd06605a725568b8e7be4e Fixed in 7.2 with commit 16f48efaeb6991193fb7775c577f06f5b20b0c90 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2026-97491 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: net/rds/ib_cm.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/db22e77df66353f1299153f6fa9620a2825bc63f https://git.kernel.org/stable/c/caa51e6da596ed6008cd06605a725568b8e7be4e https://git.kernel.org/stable/c/16f48efaeb6991193fb7775c577f06f5b20b0c90