CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown

Published Sep 24, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

net/rds: Don't sleep inside rdsibconnpathshutdown

New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other work items in the queue. Fix this by changing waitevent to waitevent timeout, and looping until the wait check succeeds.

Affected Software

1 affected component
Linux Linux kernel

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Configuration

    Change the wait_event call to wait_event_timeout and loop until the wait check succeeds, preventing the shutdown worker from sleeping indefinitely.

    Linux kernel net/rds wait_event in rds_ib_conn_path_shutdown = wait_event_timeout

Event History

Sep 24, 2026
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
Description
Data Sourced
via NVD·05:17 PM
Description

Frequently Asked Questions

1

What conditions are associated with triggering the hang?

The hang was exposed by new RDS RDMA self-tests while tearing down InfiniBand network configurations. It occurs when the shutdown worker sleeps in a wait_event call and blocks other work items in its queue.

2

What is the operational impact if this issue is triggered?

RDS InfiniBand connection-path shutdown can hang, because the shutdown worker thread blocks the work queue while waiting. Other queued work items cannot proceed until that wait completes.

3

How was the issue resolved?

The fix replaces the unbounded wait_event call with a timed wait and loops until the wait condition succeeds, allowing the worker queue to continue processing work.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203