[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-45898":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":21,"downstream":22,"duplicates":51,"related":52,"reserved_at":9,"published_at":60,"modified_at":61,"state":62,"summary":63,"references_raw":72,"kevs":123,"epss":124,"epss_history":127,"metrics":247,"affected":254},"CVE-2026-45898","In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/iwcm: Fix workqueue list corruption by removing work_list\n\nThe commit e1168f0 (\"RDMA/iwcm: Simplify cm_event_handler()\")\nchanged the work submission logic to unconditionally call\nqueue_work() with the expectation that queue_work() would\nhave no effect if work was already pending. The problem is\nthat a free list of struct iwcm_work is used (for which\nstruct work_struct is embedded), so each call to queue_work()\nis basically unique and therefore does indeed queue the work.\n\nThis causes a problem in the work handler which walks the work_list\nuntil it's empty to process entries. This means that a single\nrun of the work handler could process item N+1 and release it\nback to the free list while the actual workqueue entry is still\nqueued. It could then get reused (INIT_WORK...) and lead to\nlist corruption in the workqueue logic.\n\nFix this by just removing the work_list. The workqueue already\ndoes this for us.\n\nThis fixes the following error that was observed when stress\ntesting with ucmatose on an Intel E830 in iWARP mode:\n\n[  151.465780] list_del corruption. next->prev should be ffff9f0915c69c08, but was ffff9f0a1116be08. (next=ffff9f0a15b11c08)\n[  151.466639] ------------[ cut here ]------------\n[  151.466986] kernel BUG at lib/list_debug.c:67!\n[  151.467349] Oops: invalid opcode: 0000 [#1] SMP NOPTI\n[  151.467753] CPU: 14 UID: 0 PID: 2306 Comm: kworker/u64:18 Not tainted 6.19.0-rc4+ #1 PREEMPT(voluntary)\n[  151.468466] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[  151.469192] Workqueue:  0x0 (iw_cm_wq)\n[  151.469478] RIP: 0010:__list_del_entry_valid_or_report+0xf0/0x100\n[  151.469942] Code: c7 58 5f 4c b2 e8 10 50 aa ff 0f 0b 48 89 ef e8 36 57 cb ff 48 8b 55 08 48 89 e9 48 89 de 48 c7 c7 a8 5f 4c b2 e8 f0 4f aa ff \u003C0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90\n[  151.471323] RSP: 0000:ffffb15644e7bd68 EFLAGS: 00010046\n[  151.471712] RAX: 000000000000006d RBX: ffff9f0915c69c08 RCX: 0000000000000027\n[  151.472243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9f0a37d9c600\n[  151.472768] RBP: ffff9f0a15b11c08 R08: 0000000000000000 R09: c0000000ffff7fff\n[  151.473294] R10: 0000000000000001 R11: ffffb15644e7bba8 R12: ffff9f092339ee68\n[  151.473817] R13: ffff9f0900059c28 R14: ffff9f092339ee78 R15: 0000000000000000\n[  151.474344] FS:  0000000000000000(0000) GS:ffff9f0a847b5000(0000) knlGS:0000000000000000\n[  151.474934] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[  151.475362] CR2: 0000559e233a9088 CR3: 000000020296b004 CR4: 0000000000770ef0\n[  151.475895] PKRU: 55555554\n[  151.476118] Call Trace:\n[  151.476331]  \u003CTASK>\n[  151.476497]  move_linked_works+0x49/0xa0\n[  151.476792]  __pwq_activate_work.isra.46+0x2f/0xa0\n[  151.477151]  pwq_dec_nr_in_flight+0x1e0/0x2f0\n[  151.477479]  process_scheduled_works+0x1c8/0x410\n[  151.477823]  worker_thread+0x125/0x260\n[  151.478108]  ? __pfx_worker_thread+0x10/0x10\n[  151.478430]  kthread+0xfe/0x240\n[  151.478671]  ? __pfx_kthread+0x10/0x10\n[  151.478955]  ? __pfx_kthread+0x10/0x10\n[  151.479240]  ret_from_fork+0x208/0x270\n[  151.479523]  ? __pfx_kthread+0x10/0x10\n[  151.479806]  ret_from_fork_asm+0x1a/0x30\n[  151.480103]  \u003C/TASK>",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-1341","Multiple Releases of Same Resource or Handle","The product attempts to close or release a resource or handle more than once, without any successful open between the close operations.","weakness","Incomplete","Base",[],[],[],[],[23,25,27,29,31,33,35,37,39,41,43,45,47,49],{"_key":24},"DEBIAN-CVE-2026-45898",{"_key":26},"SUSE-SU-2026:22127-1",{"_key":28},"SUSE-SU-2026:22112-1",{"_key":30},"SUSE-SU-2026:22099-1",{"_key":32},"SUSE-SU-2026:2482-1",{"_key":34},"SUSE-SU-2026:2591-1",{"_key":36},"OPENSUSE-SU-2026:20965-1",{"_key":38},"SUSE-SU-2026:22117-1",{"_key":40},"USN-8490-2",{"_key":42},"RHSA-2026:27708",{"_key":44},"RHSA-2026:27731",{"_key":46},"RHSA-2026:30129",{"_key":48},"RHSA-2026:30848",{"_key":50},"UBUNTU-CVE-2026-45898",[],[53,54,55,56,57,58,59],{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},"2026-05-27T12:17:07.737Z","2026-07-15T00:52:02.392Z","Awaiting Analysis",{"cisa_kev":64,"cisa_ransomware":64,"cisa_vendor":9,"epss_severity":65,"epss_score":66,"severity":67,"severity_score":68,"severity_version":69,"severity_source":70,"severity_vector":71,"severity_status":62},false,"low",0.00465,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[73,78,82,86,90,96,101,106,111,115,119],{"url":74,"sources":75,"tags":77},"https://git.kernel.org/stable/c/38c5b49fffa1b760959af74f11806eeb3ef4706d",[70,76],"nvd",[],{"url":79,"sources":80,"tags":81},"https://git.kernel.org/stable/c/eb715133e0ae12514bba4d2d5ce1dee774476056",[70,76],[],{"url":83,"sources":84,"tags":85},"https://git.kernel.org/stable/c/a6b9e793e74e372daa266fd0d58b751305877897",[70,76],[],{"url":87,"sources":88,"tags":89},"https://git.kernel.org/stable/c/7874eeacfa42177565c01d5198726671acf7adf2",[70,76],[],{"url":91,"sources":92,"tags":93},"https://access.redhat.com/security/cve/CVE-2026-45898",[70],[94,95],"VDB Entry","X Refsource REDHAT",{"url":97,"sources":98,"tags":99},"https://bugzilla.redhat.com/show_bug.cgi?id=2482031",[70],[100,95],"Issue Tracking",{"url":102,"sources":103,"tags":104},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45898.json",[70],[105],"X Sadp Csaf Vex",{"url":107,"sources":108,"tags":109},"https://access.redhat.com/errata/RHSA-2026:27731",[70],[110,95],"Vendor Advisory",{"url":112,"sources":113,"tags":114},"https://access.redhat.com/errata/RHSA-2026:30129",[70],[110,95],{"url":116,"sources":117,"tags":118},"https://access.redhat.com/errata/RHSA-2026:27708",[70],[110,95],{"url":120,"sources":121,"tags":122},"https://access.redhat.com/errata/RHSA-2026:30848",[70],[110,95],[],{"date":125,"score":66,"percentile":126},"2026-07-05",0.37036,[128,132,135,139,142,145,149,152,155,158,161,164,167,169,172,175,178,181,184,188,191,194,197,200,203,206,209,213,216,219,222,225,228,231,234,237,240,243,246],{"date":129,"score":130,"percentile":131},"2026-05-28",0.00018,0.04906,{"date":133,"score":130,"percentile":134},"2026-05-29",0.04919,{"date":136,"score":137,"percentile":138},"2026-05-30",0.00044,0.13821,{"date":140,"score":137,"percentile":141},"2026-05-31",0.13794,{"date":143,"score":137,"percentile":144},"2026-06-01",0.13753,{"date":146,"score":147,"percentile":148},"2026-06-02",0.00057,0.18203,{"date":150,"score":147,"percentile":151},"2026-06-03",0.18201,{"date":153,"score":147,"percentile":154},"2026-06-04",0.18217,{"date":156,"score":147,"percentile":157},"2026-06-05",0.18293,{"date":159,"score":147,"percentile":160},"2026-06-06",0.18297,{"date":162,"score":147,"percentile":163},"2026-06-07",0.1826,{"date":165,"score":147,"percentile":166},"2026-06-08",0.18184,{"date":168,"score":147,"percentile":148},"2026-06-09",{"date":170,"score":147,"percentile":171},"2026-06-10",0.18248,{"date":173,"score":147,"percentile":174},"2026-06-11",0.18286,{"date":176,"score":147,"percentile":177},"2026-06-12",0.18449,{"date":179,"score":147,"percentile":180},"2026-06-13",0.1847,{"date":182,"score":147,"percentile":183},"2026-06-14",0.18448,{"date":185,"score":186,"percentile":187},"2026-06-15",0.00626,0.45066,{"date":189,"score":186,"percentile":190},"2026-06-16",0.45118,{"date":192,"score":186,"percentile":193},"2026-06-17",0.45195,{"date":195,"score":186,"percentile":196},"2026-06-18",0.45239,{"date":198,"score":186,"percentile":199},"2026-06-19",0.45234,{"date":201,"score":186,"percentile":202},"2026-06-20",0.45227,{"date":204,"score":186,"percentile":205},"2026-06-21",0.45212,{"date":207,"score":186,"percentile":208},"2026-06-22",0.45206,{"date":210,"score":211,"percentile":212},"2026-06-23",0.00635,0.45656,{"date":214,"score":211,"percentile":215},"2026-06-24",0.45698,{"date":217,"score":211,"percentile":218},"2026-06-25",0.45778,{"date":220,"score":211,"percentile":221},"2026-06-26",0.45819,{"date":223,"score":211,"percentile":224},"2026-06-27",0.4586,{"date":226,"score":211,"percentile":227},"2026-06-28",0.45853,{"date":229,"score":211,"percentile":230},"2026-06-29",0.45859,{"date":232,"score":66,"percentile":233},"2026-06-30",0.36856,{"date":235,"score":66,"percentile":236},"2026-07-01",0.36958,{"date":238,"score":66,"percentile":239},"2026-07-02",0.36987,{"date":241,"score":66,"percentile":242},"2026-07-03",0.37002,{"date":244,"score":66,"percentile":245},"2026-07-04",0.37019,{"date":125,"score":66,"percentile":126},[248,252],{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":249,"cvss_v4_0":9},{"baseScore":68,"baseSeverity":250,"vectorString":71,"impactScore":68,"exploitabilityScore":251},"CRITICAL",10,{"source":76,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":253,"cvss_v4_0":9},{"baseScore":68,"baseSeverity":250,"vectorString":71,"impactScore":68,"exploitabilityScore":251},[255],{"ecosystem":9,"name":256,"vendor":257,"product":257,"cpe_part":258,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":259},"Linux","linux","a",[260,267,270,273,276],{"version":261,"is_range":262,"range_type":70,"version_start":263,"version_start_type":264,"version_end":265,"version_end_type":266,"fixed_in":9},">= e1168f09b3314992f1c5251f3793102035da7237, \u003C 38c5b49fffa1b760959af74f11806eeb3ef4706d",true,"e1168f09b3314992f1c5251f3793102035da7237","including","38c5b49fffa1b760959af74f11806eeb3ef4706d","excluding",{"version":268,"is_range":262,"range_type":70,"version_start":263,"version_start_type":264,"version_end":269,"version_end_type":266,"fixed_in":9},">= e1168f09b3314992f1c5251f3793102035da7237, \u003C eb715133e0ae12514bba4d2d5ce1dee774476056","eb715133e0ae12514bba4d2d5ce1dee774476056",{"version":271,"is_range":262,"range_type":70,"version_start":263,"version_start_type":264,"version_end":272,"version_end_type":266,"fixed_in":9},">= e1168f09b3314992f1c5251f3793102035da7237, \u003C a6b9e793e74e372daa266fd0d58b751305877897","a6b9e793e74e372daa266fd0d58b751305877897",{"version":274,"is_range":262,"range_type":70,"version_start":263,"version_start_type":264,"version_end":275,"version_end_type":266,"fixed_in":9},">= e1168f09b3314992f1c5251f3793102035da7237, \u003C 7874eeacfa42177565c01d5198726671acf7adf2","7874eeacfa42177565c01d5198726671acf7adf2",{"version":277,"is_range":64,"range_type":70,"version_start":277,"version_start_type":264,"version_end":277,"version_end_type":264,"fixed_in":9},"6.11"]