Critical CPU Lockup Vulnerability in Linux Kernel - RDMA/bnxt_re Driver
Summary
DEBIAN-CVE-2024-50157: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop Driver waits indefinitely for the fifo occupancy to go below a threshold as soon as the pa... Affects linux versions < 6.11.6-1. Fixed in 6.11.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It supports a wide range of functionalities, including process management, memory management, and device control. The RDMA/bnxt_re driver is specifically designed for RDMA (Remote Direct Memory Access) operations, enabling efficient data transfer between computers over a network. However, this driver is susceptible to a vulnerability that can lead to CPU lockups under certain conditions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the RDMA/bnxt_re driver, where the driver can enter an indefinite wait state due to a FIFO occupancy check loop. This occurs when the pacing interrupt is received, and the driver waits for the FIFO occupancy to drop below a specified threshold. If the rate of Database (DB) operations is excessively high, this can result in a soft lockup on one of the processors, potentially leading to system instability and degraded performance. The issue arises from the lack of a loop count, which causes the driver to wait indefinitely, thus necessitating a fix to prevent such occurrences.
How To Fix
Minimum fixed version
6.11.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, monitoring the rate of DB operations and adjusting system configurations to reduce load may help mitigate the risk of encountering CPU lockups.
Conclusion
The RDMA/bnxt_re driver in the Linux kernel has a critical vulnerability that can lead to CPU lockups under high load conditions. It is crucial for users to update to the patched version to ensure system stability and performance. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software without needing extensive setup.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a CPU lockup caused by the RDMA/bnxt_re driver waiting indefinitely for FIFO occupancy to decrease.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without requiring any installation.
If exploited, this vulnerability can lead to soft lockups, causing system instability and performance degradation.
Yes, a patch is available in version 6.11.6-1 of the Linux package, which resolves the issue.
While there are no specific workarounds, consider monitoring system load and adjusting configurations to minimize the risk of CPU lockups until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
