Linux Kernel Rxrpc Waiting Process Abortion Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Rxrpc implementation allows a waiting process to be aborted without encountering an EBUSY error. When the sendmsg() function initiates an Rxrpc call, it must wait for a connection to be established before transmitting data. If sendmsg() is interrupted before this connection is assigned, subsequent sendmsg() calls will fail with EBUSY until a connection is made. This vulnerability has been addressed by allowing the sendmsg() call to be aborted without returning an EBUSY error, while ensuring that the call timer does not start before a connection is assigned, to avoid potential errors.

Impact

This vulnerability allows for improved process management by enabling the abortion of waiting sendmsg() calls without the usual EBUSY error, preventing potential deadlocks.

Added: Sep 15, 2025, 5:50 PM
Updated: Sep 15, 2025, 5:50 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
7.7
relevance
0.5
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.