Linux Kernel IB/cm Vulnerability in Lock Management

A vulnerability in the Linux kernel's IB/cm component has been addressed. The issue arose because the send completion handler could execute after the connection manager ID (cm_id) had moved on to another message. Although the cm_id lock was unnecessary in this scenario, a recent change repurposed the cm_free_priv_msg() function. This function requires the lock to be held and issues a warning if the cm_id's currently active message differs from the one being released.

Impact

The vulnerability could lead to improper message management in the connection manager, potentially causing synchronization issues or message handling errors.