Use After Free Vulnerability in RDMA/siw Package
Summary
GSD-2021-1000342: RDMA/siw: Fix a use after free in siw_alloc_mr. Affects Kernel versions >= 2251334dcac9eb337575d8767e2a6a7e81848f7f, < 608a4b90ece039940e9425ee2b39c8beff27e00c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/siw package is a component of the Linux Kernel that provides support for Remote Direct Memory Access (RDMA) over the Softiwarp protocol. RDMA allows for high-performance data transfers between remote systems with low latency and CPU overhead. The siw_alloc_mr function in the siw driver is responsible for allocating memory regions for RDMA operations. However, a use after free vulnerability has been discovered in siw_alloc_mr, which could potentially lead to memory corruption or privilege escalation.
Vulnerability Detail
The use after free vulnerability in siw_alloc_mr occurs when a memory region is accessed after it has been freed. An attacker could exploit this vulnerability by manipulating the memory allocation and deallocation process to gain unauthorized access to sensitive information or execute arbitrary code. The impact of this vulnerability depends on the context in which it is exploited, but it could potentially lead to a system compromise or the disclosure of confidential data. The vulnerability was introduced in version v5.3 of the Linux Kernel and has been fixed in version v5.10.37.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can consider disabling the RDMA functionality or the siw driver if it is not essential for their system. This can be done by modifying the Kernel configuration or blacklisting the siw module. However, this workaround may impact the functionality of RDMA-related applications or services.
Conclusion
The use after free vulnerability in siw_alloc_mr of the RDMA/siw package can pose a significant security risk to systems utilizing RDMA functionality. It is crucial to update the Linux Kernel to version v5.10.37 or later to mitigate this vulnerability. Disabling the RDMA functionality or the siw driver can serve as a temporary workaround, but it may impact the functionality of RDMA-related applications or services. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA (Remote Direct Memory Access) is a technology that allows for high-performance data transfers between remote systems with low latency and CPU overhead. It enables direct access to remote memory without involving the CPU, resulting in faster data transfers.
The siw_alloc_mr function in the siw driver is responsible for allocating memory regions for RDMA operations. It ensures that the allocated memory is properly initialized and accessible for RDMA transfers.
A use after free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to memory corruption, crashes, or the execution of arbitrary code.
The use after free vulnerability in siw_alloc_mr could potentially allow an attacker to gain unauthorized access to sensitive information, execute arbitrary code, or escalate privileges. The impact depends on the context in which the vulnerability is exploited.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities in software, using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
