What’s Vulnerable › Vulnerabilities

CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-10-03

Description

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rds_ib_conn_path_shutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the wait_event call, which blocks other work items in the queue. Fix this by changing wait_event to wait_event timeout, and looping until the wait check succeeds.

Affected products

• Linux kernel: 2.6.30 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/07a348d48e589b91a0d5a5cfa0de137cc703fabf
• https://git.kernel.org/stable/c/16f48efaeb6991193fb7775c577f06f5b20b0c90
• https://git.kernel.org/stable/c/934a6381c79d815680c955d676791322e020bfda
• https://git.kernel.org/stable/c/ac0bc28da5150c4fa81a76172fff5ec70f2063eb
• https://git.kernel.org/stable/c/b3621acf640e32dcb986d9b3767f2387f29dad05
• https://git.kernel.org/stable/c/caa51e6da596ed6008cd06605a725568b8e7be4e
• https://git.kernel.org/stable/c/db22e77df66353f1299153f6fa9620a2825bc63f

Get alerted when CVE-2026-97491 or the next vulnerability affects your stack