Description
In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix ib_cache_setup_one error flow cleanup When ib_cache_update return an error, we exit ib_cache_setup_one instantly with no proper cleanup, even though before this we had already successfully done gid_table_setup_one, that results in the kernel WARN below. Do proper cleanup using gid_table_cleanup_one before returning the err in order to fix the issue. WARNING: CPU: 4 PID: 922 at drivers/infiniband/core/cache.c:806 gid_table_release_one+0x181/0x1a0 Modules linked in: CPU: 4 UID: 0 PID: 922 Comm: c_repro Not tainted 6.11.0-rc1+ #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:gid_table_release_one+0x181/0x1a0 Code: 44 8b 38 75 0c e8 2f cb 34 ff 4d 8b b5 28 05 00 00 e8 23 cb 34 ff 44 89 f9 89 da 4c 89 f6 48 c7 c7 d0 58 14 83 e8 4f de 21 ff <0f> 0b 4c 8b 75 30 e9 54 ff ff ff 48 8 3 c4 10 5b 5d 41 5c 41 5d 41 RSP: 0018:ffffc90002b835b0 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff811c8527 RDX: 0000000000000000 RSI: ffffffff811c8534 RDI: 0000000000000001 RBP: ffff8881011b3d00 R08: ffff88810b3abe00 R09: 205d303839303631 R10: 666572207972746e R11: 72746e6520444947 R12: 0000000000000001 R13: ffff888106390000 R14: ffff8881011f2110 R15: 0000000000000001 FS: 00007fecc3b70800(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000340 CR3: 000000010435a001 CR4: 00000000003706b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? show_regs+0x94/0xa0 ? __warn+0x9e/0x1c0 ? gid_table_release_one+0x181/0x1a0 ? report_bug+0x1f9/0x340 ? gid_table_release_one+0x181/0x1a0 ? handle_bug+0xa2/0x110 ? exc_invalid_op+0x31/0xa0 ? asm_exc_invalid_op+0x16/0x20 ? __warn_printk+0xc7/0x180 ? __warn_printk+0xd4/0x180 ? gid_table_release_one+0x181/0x1a0 ib_device_release+0x71/0xe0 ? __pfx_ib_device_release+0x10/0x10 device_release+0x44/0xd0 kobject_put+0x135/0x3d0 put_device+0x20/0x30 rxe_net_add+0x7d/0xa0 rxe_newlink+0xd7/0x190 nldev_newlink+0x1b0/0x2a0 ? __pfx_nldev_newlink+0x10/0x10 rdma_nl_rcv_msg+0x1ad/0x2e0 rdma_nl_rcv_skb.constprop.0+0x176/0x210 netlink_unicast+0x2de/0x400 netlink_sendmsg+0x306/0x660 __sock_sendmsg+0x110/0x120 ____sys_sendmsg+0x30e/0x390 ___sys_sendmsg+0x9b/0xf0 ? kstrtouint+0x6e/0xa0 ? kstrtouint_from_user+0x7c/0xb0 ? get_pid_task+0xb0/0xd0 ? proc_fail_nth_write+0x5b/0x140 ? __fget_light+0x9a/0x200 ? preempt_count_add+0x47/0xa0 __sys_sendmsg+0x61/0xd0 do_syscall_64+0x50/0x110 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Product status
1901b91f99821955eac2bd48fe25ee983385dc00 (git) before 1730d47d1865af89efd01cf0469a9a739cbf60f2
1901b91f99821955eac2bd48fe25ee983385dc00 (git) before 45f63f4bb9a7128a6209d766c2fc02b3d42fbf3e
1901b91f99821955eac2bd48fe25ee983385dc00 (git) before d08754be993f270e3d296d8f5d8e071fe6638651
1901b91f99821955eac2bd48fe25ee983385dc00 (git) before af633fd9d9fff59e31c804f47ca0c8a784977773
1901b91f99821955eac2bd48fe25ee983385dc00 (git) before 290fe42fe0165205c4451334d8833a9202ae1d52
1901b91f99821955eac2bd48fe25ee983385dc00 (git) before 1403c8b14765eab805377dd3b75e96ace8747aed
ee7ce7d7e7c76d5ec4c8067d32bbee9728dc9d29 (git)
2a5968f266c7b9dc13917ac573af8d7b7da4023c (git)
5.7
Any version before 5.7
5.15.168 (semver)
6.1.113 (semver)
6.6.54 (semver)
6.10.13 (semver)
6.11.2 (semver)
6.12 (original_commit_for_fix)
References
lists.debian.org/debian-lts-announce/2025/01/msg00001.html
git.kernel.org/...c/1730d47d1865af89efd01cf0469a9a739cbf60f2
git.kernel.org/...c/45f63f4bb9a7128a6209d766c2fc02b3d42fbf3e
git.kernel.org/...c/d08754be993f270e3d296d8f5d8e071fe6638651
git.kernel.org/...c/af633fd9d9fff59e31c804f47ca0c8a784977773
git.kernel.org/...c/290fe42fe0165205c4451334d8833a9202ae1d52
git.kernel.org/...c/1403c8b14765eab805377dd3b75e96ace8747aed
Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.