RDMA/irdma: Fix deadlock during netdev reset with active connections

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix deadlock during netdev reset with active connections Resolve deadlock that occurs when user executes netdev reset while RDMA applications (e.g., rping) are active. The netdev reset causes ice driver to remove irdma auxiliary driver, triggering device_delete and subsequent client removal. During client removal, uverbs_client waits for QP reference count to reach zero while cma_client holds the final reference, creating circular dependency and indefinite wait in iWARP mode. Skip QP reference count wait during device reset to prevent deadlock.

Timeline

1. Apr 24, 2026, 2:35 PM UTCCVE published
2. Oct 15, 2026, 1:17 AM UTCRecord last updated

Affected versions

• Linux Linux

  From 0b3c392b82cdf867808a8ea7c6760d3c7e6b6627 · fixed in 009831768faeca3fb5950ce63f1b49594ec82389; From 07322c8a12d6c796450faacb8be9e5e3c278ec84 · fixed in adf0de36e52a48681eb58cbd7cbf6c8d200caa2b; From c8f304d75f6c6cc679a73f89591f9a915da38f09 · fixed in acb060bc2609c2eab49263968be59c7d59d497bc; From c8f304d75f6c6cc679a73f89591f9a915da38f09 · fixed in a8a1c7621127a15a02494b96ee376406c064237b; From c8f304d75f6c6cc679a73f89591f9a915da38f09 · fixed in cd8bcec2de5e24e05c34c9391940fda6f50e79b4; From c8f304d75f6c6cc679a73f89591f9a915da38f09 · fixed in 464bbb844ba5b68e038220c34019069a0a9f1581; From c8f304d75f6c6cc679a73f89591f9a915da38f09 · fixed in 6f52370970ac07d352a7af4089e55e0e6425f827; From 5.15.116 · fixed in 5.15.203; From 6.1.33 · fixed in 6.1.168; From 6.3.7 · fixed in 6.4

• Linux Linux

  6.4

• KernelLinux

  fixed in 5.15.203; From 5.16.0 · fixed in 6.1.168; From 6.2.0 · fixed in 6.6.131; From 6.4.0 · fixed in 6.12.80; From 6.7.0 · fixed in 6.18.21; From 6.13.0 · fixed in 6.19.11

References 7