Vulnerability in RDMA/rtrs-clt package: destroy sysfs after removing session from active list
Summary
GSD-2021-1000359: RDMA/rtrs-clt: destroy sysfs after removing session from active list. Affects Kernel versions >= 6a98d71daea186247005099758af549e6afdd244, < b64415c6b3476cf9fa4d0aea3807065b8403a937. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/rtrs-clt package is a component of the Linux Kernel ecosystem. It provides support for Remote Direct Memory Access (RDMA) and is responsible for managing the sysfs (system file system) after removing a session from the active list. The sysfs is a virtual file system in Linux that exposes kernel data structures and attributes to user space. This vulnerability affects versions of the Linux Kernel from v5.8 to v5.10.36.
Vulnerability Detail
The vulnerability in RDMA/rtrs-clt arises from the improper handling of the sysfs after removing a session from the active list. When a session is removed, the sysfs associated with it should be destroyed to prevent any potential security issues. However, this destruction process is not performed correctly, leaving the sysfs vulnerable to exploitation. An attacker could potentially manipulate the sysfs to gain unauthorized access, escalate privileges, or cause a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can manually destroy the sysfs associated with a session after removing it from the active list. This can be achieved by executing the following code snippet:
echo 1 > /sys/kernel/rtrs-clt/destroy_sysfs
Conclusion
In conclusion, the RDMA/rtrs-clt package in the Linux Kernel is vulnerable to an issue where the sysfs is not properly destroyed after removing a session from the active list. This vulnerability can be mitigated by updating the kernel to version v5.10.37 or later. A workaround is also available by manually destroying the sysfs. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The RDMA/rtrs-clt package is a component of the Linux Kernel ecosystem that provides support for Remote Direct Memory Access (RDMA). It manages the sysfs after removing a session from the active list.
Sysfs is a virtual file system in Linux that exposes kernel data structures and attributes to user space. It allows users and applications to interact with the kernel and retrieve information about various system components.
This vulnerability could potentially allow an attacker to manipulate the sysfs associated with a session, leading to unauthorized access, privilege escalation, or a denial-of-service (DoS) condition.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.37 or later. This update includes the necessary fix implemented in commit b64415c6b3476cf9fa4d0aea3807065b8403a937.
Yes, as a workaround, users can manually destroy the sysfs associated with a session after removing it from the active list. This can be achieved by executing the following code snippet:
echo 1 > /sys/kernel/rtrs-clt/destroy_sysfs
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
