NULL dereference in nvmet-rdma when SEND is completed with error
Summary
GSD-2021-1000196: nvmet-rdma: Fix NULL deref when SEND is completed with error. Affects Kernel versions >= ca0f1a8055be2a04073af435dc68419334481638, < 5bdb34466ad8370546dfa0497594fb1d6f2fed90. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nvmet-rdma is a component in the Linux Kernel that provides support for the NVMe over Fabrics (NVMe-oF) protocol over RDMA (Remote Direct Memory Access). NVMe-oF allows remote access to NVMe storage devices over a network. The nvmet-rdma module enables this functionality by implementing the RDMA transport for NVMe-oF. It allows RDMA-capable devices to communicate with NVMe storage devices using the RDMA protocol.
Vulnerability Detail
The vulnerability identified as GSD-2021-1000196 in the nvmet-rdma module of the Linux Kernel allows for a NULL dereference when a SEND operation is completed with an error. This vulnerability was introduced in version v5.9 of the Linux Kernel and was fixed in version v5.12.5. An attacker could exploit this vulnerability to cause a denial-of-service condition or potentially execute arbitrary code in the kernel context. The vulnerability arises due to improper handling of errors during the completion of SEND operations in the nvmet-rdma module.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, if updating the kernel is not immediately feasible, it is recommended to disable the nvmet-rdma module or remove it from the kernel configuration. This can be achieved by modifying the kernel configuration file and rebuilding the kernel without the nvmet-rdma module. However, this workaround may result in the loss of NVMe-oF functionality over RDMA.
Conclusion
The NULL dereference vulnerability in the nvmet-rdma module of the Linux Kernel can be mitigated by updating the kernel to version v5.12.5 or later. Alternatively, disabling or removing the nvmet-rdma module from the kernel configuration can serve as a temporary workaround. It is important to take prompt action to ensure the security and stability of the system. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The nvmet-rdma module is a component in the Linux Kernel that enables the NVMe over Fabrics (NVMe-oF) protocol over RDMA. It allows RDMA-capable devices to communicate with NVMe storage devices using the RDMA protocol.
The vulnerability in the nvmet-rdma module can lead to a NULL dereference when a SEND operation is completed with an error. This could result in a denial-of-service condition or potential execution of arbitrary code in the kernel context.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.5 or later, which includes the necessary patch. Alternatively, you can disable or remove the nvmet-rdma module from the kernel configuration.
Yes, as a workaround, you can disable or remove the nvmet-rdma module from the kernel configuration. However, this may result in the loss of NVMe-oF functionality over RDMA.
You can find more information about this vulnerability in the GSD-2021-1000196 entry of the GSD database maintained by the Cloud Security Alliance. The vulnerability details can be accessed at the following link: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000196.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
