Critical Use-After-Free Vulnerability in Linux Kernel's RDMA/hns Package
Summary
CVE-2024-38545: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix UAF for cq async event The refcount of CQ is not protected by locks. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of functionalities, including networking, file systems, and device management. The RDMA/hns (Remote Direct Memory Access) subsystem is designed to facilitate high-performance networking by allowing direct memory access from the memory of one computer to another without involving the CPU. This vulnerability exposes the kernel to potential security risks, particularly in environments relying on RDMA for efficient data transfer.
Vulnerability Detail
In the Linux kernel, a critical vulnerability has been identified in the RDMA/hns subsystem, specifically a Use-After-Free (UAF) issue related to the completion queue (CQ) asynchronous events. The reference count of the CQ is not adequately protected by locks, leading to a situation where concurrent destruction of the CQ and its asynchronous events can occur. This can result in the CQ being released while still in use, potentially allowing an attacker to exploit this condition to execute arbitrary code or cause a denial of service. The vulnerability has been assigned a CVSS score of 7.8, indicating a high severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the necessary updates as soon as they are available.
Conclusion
The CVE-2024-38545 vulnerability in the Linux kernel's RDMA/hns subsystem poses a significant risk due to its Use-After-Free nature. Users are strongly advised to update their systems to the latest kernel versions to mitigate potential threats. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
A Use-After-Free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
Exploitation of this vulnerability could lead to unauthorized access, data corruption, or denial of service, significantly affecting system integrity and availability.
Yes, updating to the specified fixed versions for Debian 11, 12, and 13 will mitigate the vulnerability.
Detailed information can be found in the CVE database and through security advisories related to the Linux kernel.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
