RDMA/hfi1: Prevent panic when SDMA is disabled
Summary
GSD-2022-1002695: RDMA/hfi1: Prevent panic when SDMA is disabled. Affects Kernel versions < 22e7e400fd1a890db2ea13686324aff50e972f4f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/hfi1 package is a component of the Linux Kernel that provides support for InfiniBand and RoCE (RDMA over Converged Ethernet) network technologies. It enables high-speed, low-latency communication between servers and storage systems. The hfi1 driver is responsible for managing the Mellanox InfiniBand Host Channel Adapter (HCA) hardware. This vulnerability affects the package when SDMA (Synchronous Direct Memory Access) is disabled.
Vulnerability Detail
This vulnerability in RDMA/hfi1 can lead to a system panic when SDMA is disabled. SDMA is a feature that allows the HCA to perform direct memory access operations without involving the CPU. When SDMA is disabled, certain operations may trigger a panic, causing the system to crash. An attacker with local access to the system could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Kernel is not immediately feasible, a possible workaround is to enable SDMA. By enabling SDMA, the vulnerability can be mitigated. However, enabling SDMA may have performance implications depending on the workload and hardware configuration.
Conclusion
In conclusion, the RDMA/hfi1 package in the Linux Kernel is vulnerable to a panic when SDMA is disabled. This vulnerability can potentially be exploited by an attacker with local access to the system. It is recommended to update the Kernel to version v5.18.3 or later to fix this vulnerability. If immediate update is not possible, enabling SDMA can serve as a temporary workaround. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/hfi1 is a component of the Linux Kernel that provides support for InfiniBand and RoCE network technologies. It enables high-speed, low-latency communication between servers and storage systems.
SDMA stands for Synchronous Direct Memory Access. It is a feature that allows the Mellanox InfiniBand Host Channel Adapter (HCA) to perform direct memory access operations without involving the CPU.
The vulnerability can lead to a system panic when SDMA is disabled, potentially causing a denial-of-service (DoS) condition. However, the actual impact and attack plausibility have not been proven.
To fix this vulnerability, update the Linux Kernel to version v5.18.3 or later, which includes the necessary fix. The specific commit that addresses this vulnerability is 22e7e400fd1a890db2ea13686324aff50e972f4f.
If updating the Kernel is not immediately feasible, a possible workaround is to enable SDMA. However, enabling SDMA may have performance implications depending on the workload and hardware configuration.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
