CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown
In the Linux kernel, the following vulnerability has been resolved:
net/rds: Don't sleep inside rdsibconnpathshutdown
New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other work items in the queue. Fix this by changing waitevent to waitevent timeout, and looping until the wait check succeeds.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change the wait_event call to wait_event_timeout and loop until the wait check succeeds, preventing the shutdown worker from sleeping indefinitely.
Linux kernel net/rds wait_event in rds_ib_conn_path_shutdown = wait_event_timeout
Event History
Frequently Asked Questions
What conditions are associated with triggering the hang?
The hang was exposed by new RDS RDMA self-tests while tearing down InfiniBand network configurations. It occurs when the shutdown worker sleeps in a wait_event call and blocks other work items in its queue.
What is the operational impact if this issue is triggered?
RDS InfiniBand connection-path shutdown can hang, because the shutdown worker thread blocks the work queue while waiting. Other queued work items cannot proceed until that wait completes.
How was the issue resolved?
The fix replaces the unbounded wait_event call with a timed wait and loops until the wait condition succeeds, allowing the worker queue to continue processing work.