{"id":"CVE-2024-56641","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n  WARNING: CPU: 7 PID: 111103 at ke…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n  WARNING: CPU: 7 PID: 111103 at ke…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-665"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 4.12, < 6.6.66","linux_kernel >= 6.7, < 6.12.5","linux_kernel = 6.13"],"patched":["linux_kernel 6.12.5"],"published":"2024-12-27","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:18:02.013","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-56641","references":[{"url":"https://git.kernel.org/stable/c/0541db8ee32c09463a72d0987382b3a3336b0043","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6638e52dcfafaf1b9cbc34544f0c832db0069ea1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f0c37002210aaede10dae849d1a78efc2243add2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56641.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-56641"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2334558"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56641"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56641"},{"url":"https://lore.kernel.org/linux-cve-announce/2024122736-CVE-2024-56641-5492@gregkh/T"}],"tags":["nvd","csaf","vex","red-hat","cve.org","score-dispute"],"epss":0.00515,"epssPercentile":0.43676,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-15T21:41:11.352533Z"},"scores":{"nvd":7.5,"vendor":3.3,"cna":7.5},"ingestedAt":"2026-10-15T22:48:25.445Z","slug":"CVE-2024-56641","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: initialize close_work early to avoid warning\n\nWe encountered a warning that close_work was canceled before\ninitialization.\n\n  WARNING: CPU: 7 PID: 111103 at kernel/workqueue.c:3047 __flush_work+0x19e/0x1b0\n  Workqueue: events smc_lgr_terminate_work [smc]\n  RIP: 0010:__flush_work+0x19e/0x1b0\n  Call Trace:\n   ? __wake_up_common+0x7a/0x190\n   ? work_busy+0x80/0x80\n   __cancel_work_timer+0xe3/0x160\n   smc_close_cancel_work+0x1a/0x70 [smc]\n   smc_close_active_abort+0x207/0x360 [smc]\n   __smc_lgr_terminate.part.38+0xc8/0x180 [smc]\n   process_one_work+0x19e/0x340\n   worker_thread+0x30/0x370\n   ? process_one_work+0x340/0x340\n   kthread+0x117/0x130\n   ? __kthread_cancel_work+0x50/0x50\n   ret_from_fork+0x22/0x30\n\nThis is because when smc_close_cancel_work is triggered, e.g. the RDMA\ndriver is rmmod and the LGR is terminated, the conn->close_work is\nflushed before initialization, resulting in WARN_ON(!work->func).\n\n__smc_lgr_terminate             | smc_connect_{rdma|ism}\n-------------------------------------------------------------\n                                | smc_conn_create\n\t\t\t\t| \\- smc_lgr_register_conn\nfor conn in lgr->conns_all      |\n\\- smc_conn_kill                |\n   \\- smc_close_active_abort    |\n      \\- smc_close_cancel_work  |\n         \\- cancel_work_sync    |\n            \\- __flush_work     |\n\t         (close_work)   |\n\t                        | smc_close_init\n\t                        | \\- INIT_WORK(&close_work)\n\nSo fix this by initializing close_work before establishing the\nconnection.\n\n## Affected\n\n- `linux_kernel >= 4.12, < 6.6.66`\n- `linux_kernel >= 6.7, < 6.12.5`\n- `linux_kernel = 6.13`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.12.5`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56641.json)","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":229997,"id":"CVE-2024-56641","ts":1793124765829,"field":"cvss","old":"3.3","new":"7.5"},{"seq":229996,"id":"CVE-2024-56641","ts":1793124765829,"field":"severity","old":"low","new":"high"},{"seq":223689,"id":"CVE-2024-56641","ts":1792238368109,"field":"cvss","old":"7.5","new":"3.3"},{"seq":223688,"id":"CVE-2024-56641","ts":1792238368109,"field":"severity","old":"high","new":"low"}]}