RDMA/hfi1: Prevent panic when SDMA is disabled
Summary
GSD-2022-1003863: RDMA/hfi1: Prevent panic when SDMA is disabled. Affects Kernel versions < 0e4dda8b3f4c07ee9ea670a10ea3171a5e63a86f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/hfi1 package is a component of the Linux Kernel that provides support for InfiniBand and RoCE (RDMA over Converged Ethernet) network technologies. It allows for high-speed, low-latency communication between servers and storage systems. The package includes drivers and modules that enable the use of RDMA capabilities in the Linux operating system.
Vulnerability Detail
This vulnerability in the RDMA/hfi1 package can lead to a panic condition when SDMA (Synchronous Direct Memory Access) is disabled. SDMA is a feature that allows for efficient data transfers between the host and the network adapter. When SDMA is disabled, certain operations in the RDMA/hfi1 package can trigger a panic, resulting in a system crash. This vulnerability could be exploited by an attacker with local access to the system to cause a denial-of-service (DoS) condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The RDMA/hfi1 package in the Linux Kernel is vulnerable to a panic condition when SDMA is disabled. This can result in a system crash and potential denial-of-service (DoS) situation. It is recommended to update the Linux Kernel to version v4.19.247 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/hfi1 is a package in the Linux Kernel that provides support for InfiniBand and RoCE network technologies, enabling high-speed, low-latency communication between servers and storage systems.
SDMA stands for Synchronous Direct Memory Access and is a feature that allows for efficient data transfers between the host and the network adapter.
This vulnerability can lead to a panic condition and system crash when SDMA is disabled, potentially causing a denial-of-service (DoS) situation.
To fix this vulnerability, update the Linux Kernel to version v4.19.247 or later, which includes the necessary patch.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
