CVE-2025-21805: RDMA/rtrs: Add missing deinit() call
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rtrs: Add missing deinit() call
A warning is triggered when repeatedly connecting and disconnecting the rnbd: listadd corruption. prev->next should be next (ffff88800b13e480), but was ffff88801ecd1338. (prev=ffff88801ecd1340). WARNING: CPU: 1 PID: 36562 at lib/listdebug.c:32 listaddvalidorreport+0x7f/0xa0 Workqueue: ibcm cmworkhandler [ibcm] RIP: 0010:listaddvalidorreport+0x7f/0xa0 ? listaddvalidorreport+0x7f/0xa0 ibregistereventhandler+0x65/0x93 [ibcore] rtrssrvibdevinit+0x29/0x30 [rtrsserver] rtrsibdevfindoradd+0x124/0x1d0 [rtrscore] allocpath+0x46c/0x680 [rtrsserver] ? rtrsrdmaconnect+0xa6/0x2d0 [rtrsserver] ? rcuiswatching+0xd/0x40 ? mutexlock+0x312/0xcf0 ? getorcreatesrv+0xad/0x310 [rtrsserver] ? rtrsrdmaconnect+0xa6/0x2d0 [rtrsserver] rtrsrdmaconnect+0x23c/0x2d0 [rtrsserver] ? lockrelease+0x1b1/0x2d0 cmacmeventhandler+0x4a/0x1a0 [rdmacm] cmaibreqhandler+0x3a0/0x7e0 [rdmacm] cmprocesswork+0x28/0x1a0 [ibcm] ? rawspinunlockirq+0x2f/0x50 cmreqhandler+0x618/0xa60 [ibcm] cmworkhandler+0x71/0x520 [ibcm]
Commit 667db86bcbe8 ("RDMA/rtrs: Register ib event handler") introduced a new element .deinit but never used it at all. Fix it by invoking the deinit() to appropriately unregister the IB event handler.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update the RDMA/rtrs code so that the missing deinit() call is invoked to appropriately unregister the IB event handler (commit mentions this as the resolution: "RDMA/rtrs: Add missing deinit() call").
Linux kernel (RDMA/rtrs) deinit() call for IB event handler = Invoke deinit() to unregister the IB event handler
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21805?
CVE-2025-21805 has a severity rating that may vary based on specific configurations, but it can lead to system instability.
How do I fix CVE-2025-21805?
To fix CVE-2025-21805, update your Linux kernel to the latest stable release where this vulnerability is resolved.
What could happen if CVE-2025-21805 is exploited?
Exploiting CVE-2025-21805 may lead to warning messages and potential memory corruption when connecting and disconnecting repeatedly.
Which versions of the Linux Kernel are affected by CVE-2025-21805?
CVE-2025-21805 affects certain versions of the Linux Kernel, especially those involving RDMA/rtrs components.
What is the nature of the vulnerability in CVE-2025-21805?
CVE-2025-21805 involves a missing deinit() call resulting in list_add corruption during repeated connect and disconnect operations.