In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport error_recovery work While nvme_rdma_submit_async_event_work is checking the ctrl and queue state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this check is not reliable the error recovery work must flush async_event_work before continuing to destroy the admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and the error recovery handler itself changing the ctrl state.
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | 5.2.2 |
| Linux | Linux | 5.2.3 |
| Linux | Linux | 7.3 E0506P09 and earlier |
| Linux | Linux | Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier |