RDMA/hfi1: Prevent panic when SDMA is disabled
Summary
GSD-2022-1003041: RDMA/hfi1: Prevent panic when SDMA is disabled. Affects Kernel versions < 29952ab85d6c3fe0b7909d9a737f10c58bf6824d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/hfi1 package is a component of the Linux Kernel that provides support for InfiniBand and RoCE (RDMA over Converged Ethernet) networking. It enables high-performance, low-latency communication between servers and storage systems. The package includes drivers and utilities for managing RDMA devices. However, a vulnerability has been discovered in the package that can lead to a system panic when SDMA (Synchronous Direct Memory Access) is disabled.
Vulnerability Detail
The vulnerability in RDMA/hfi1 arises when SDMA is disabled. SDMA is a feature that allows data to be transferred directly between memory and I/O devices without involving the CPU. When SDMA is disabled, certain operations in the RDMA/hfi1 package can trigger a panic, causing the system to crash. This vulnerability can be exploited by an attacker with local access to the system to cause a denial of service (DoS) condition. The impact of this vulnerability is limited to systems where SDMA is intentionally disabled.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Linux Kernel is not immediately feasible, a workaround for this vulnerability is to enable SDMA if it has been disabled. This can be done by modifying the system's configuration or kernel parameters to enable SDMA support. Consult the documentation or support resources for the specific Linux distribution or system configuration for guidance on enabling SDMA.
Conclusion
The vulnerability in RDMA/hfi1 that causes a panic when SDMA is disabled can be mitigated by updating the Linux Kernel to version v5.17.14 or later. Alternatively, enabling SDMA if it has been disabled can serve as a temporary workaround. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/hfi1 is a component of the Linux Kernel that provides support for InfiniBand and RoCE networking. It enables high-performance, low-latency communication between servers and storage systems.
SDMA stands for Synchronous Direct Memory Access. It is a feature that allows data to be transferred directly between memory and I/O devices without involving the CPU.
The vulnerability can lead to a system panic and crash when SDMA is disabled. It can be exploited by an attacker with local access to the system to cause a denial of service (DoS) condition.
To fix this vulnerability, update the Linux Kernel to version v5.17.14 or later. Alternatively, enable SDMA if it has been disabled.
The updated Linux Kernel can be obtained from the official Linux Kernel website or through the distribution's package manager.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
