Impact
The Linux kernel’s rds RDMA subsystem contained a flaw in the rds_ib_conn_path_shutdown routine where a call to wait_event caused the shutdown worker thread to sleep. Because this sleep occurred inside the workqueue, it blocked other work items from executing, potentially leading to a system hang when dismantling InfiniBand network configurations. The patch replaces the blocking wait_event with wait_event_timeout and loops until the condition is satisfied, ensuring that shutdown does not stall the queue and the system remains responsive.
Affected Systems
The defect resides in the core Linux kernel, affecting any distribution that includes the unpatched rds code. No specific release or version range is listed, so any kernel build containing the old rds_ib_conn_path_shutdown logic may be vulnerable.
Risk and Exploitability
The CVSS score of 5.5 and an EPSS score of less than 1% indicate moderate severity and a low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting it is not widely exploited. The likely attack vector is a local user or an attacker who can trigger the kernel’s shutdown path—such as by running kernel self‑tests or by exploiting a separate privilege escalation to reach kernel mode. Because the flaw is confined to the kernel’s internal workqueue, elevated privileges are required for direct exploitation.
OpenCVE Enrichment
Debian DLA
Debian DSA