Critical Vulnerability in Linux Kernel: RDMA/siw MSG_SPLICE_PAGES Issue
Summary
DEBIAN-CVE-2024-53094: In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES While running ISER over SIW, the initiator machine encounters a warning from skb_splice_fr... Affects linux versions < 6.11.9-1. Fixed in 6.11.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system. The kernel is highly modular, allowing for various functionalities, including networking, file systems, and device management. This vulnerability specifically affects the RDMA (Remote Direct Memory Access) subsystem, which facilitates high-throughput, low-latency networking. The issue arises in the siw (Software iWarp) driver, which is used for RDMA over TCP/IP networks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the RDMA/siw driver related to the handling of the MSG_SPLICE_PAGES flag during network operations. When running ISER (iSCSI Extensions for RDMA) over SIW, a warning is triggered indicating that a slab page is being used in the send_page function. This can lead to unexpected behavior and potential system instability. The vulnerability is rooted in the lack of a sendpage_ok() check, which, if implemented, would disable the MSG_SPLICE_PAGES flag when necessary, preventing the warning and ensuring proper operation within the network stack.
How To Fix
Minimum fixed version
6.11.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable the MSG_SPLICE_PAGES flag manually in the driver code, but this requires recompiling the driver, which may not be feasible for all users. It is recommended to apply the official patch instead.
Conclusion
The RDMA/siw vulnerability in the Linux kernel poses a significant risk to system stability during network operations. Users are advised to promptly update their systems to the patched version to mitigate potential issues. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system instability and unexpected behavior during network operations using the RDMA/siw driver.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
RDMA stands for Remote Direct Memory Access, a technology that allows direct memory access from the memory of one computer to another without involving the CPU, enhancing performance.
The MSG_SPLICE_PAGES flag is used in socket programming to optimize the transmission of data by allowing pages of memory to be sent directly over the network.
Yes, the permanent fix is to update the Linux kernel to version 6.11.9-1 or later, which includes the necessary patches.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
