CVE-2026-97491net/rds: Don't sleep inside rds_ib_conn_path_shutdown
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait_event call, which blocks other work items in the queue. Fix this by changing wait_event to wait_event timeout, and looping until the wait check succeeds.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ec16227e14141e4fd7ae76354c09dadfe2449d9e before b3621acf640e32dcb986d9b3767f2387f29dad05; from ec16227e14141e4fd7ae76354c09dadfe2449d9e before ac0bc28da5150c4fa81a76172fff5ec70f2063eb; from ec16227e14141e4fd7ae76354c09dadfe2449d9e before 934a6381c79d815680c955d676791322e020bfda; from ec16227e14141e4fd7ae76354c09dadfe2449d9e before 07a348d48e589b91a0d5a5cfa0de137cc703fabf; from ec16227e14141e4fd7ae76354c09dadfe2449d9e before db22e77df66353f1299153f6fa9620a2825bc63f; from ec16227e14141e4fd7ae76354c09dadfe2449d9e before caa51e6da596ed6008cd06605a725568b8e7be4e; from ec16227e14141e4fd7ae76354c09dadfe2449d9e before 16f48efaeb6991193fb7775c577f06f5b20b0c90 | CNA record |
References
- https://git.kernel.org/stable/c/b3621acf640e32dcb986d9b3767f2387f29dad05
- https://git.kernel.org/stable/c/ac0bc28da5150c4fa81a76172fff5ec70f2063eb
- https://git.kernel.org/stable/c/934a6381c79d815680c955d676791322e020bfda
- https://git.kernel.org/stable/c/07a348d48e589b91a0d5a5cfa0de137cc703fabf
- https://git.kernel.org/stable/c/db22e77df66353f1299153f6fa9620a2825bc63f
- https://git.kernel.org/stable/c/caa51e6da596ed6008cd06605a725568b8e7be4e
- https://git.kernel.org/stable/c/16f48efaeb6991193fb7775c577f06f5b20b0c90
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.