RDMA/ipoib: Fix warning caused by destroying non-initial netns in Kernel
Summary
GSD-2021-1001036: RDMA/ipoib: Fix warning caused by destroying non-initial netns. Affects Kernel versions >= 5ce2dced8e95e76ff7439863a118a053a7fc6f91, < 0a672f7d89db2da17ae02733ccc08458be72a6f8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a fundamental component of the Linux operating system that provides core services for managing hardware, memory, and processes. RDMA (Remote Direct Memory Access) is a technology that allows for high-speed data transfer between remote systems. The ipoib (IP over InfiniBand) is a network driver in the Kernel that enables IP communication over InfiniBand networks. This vulnerability in the RDMA/ipoib driver occurs when a non-initial network namespace (netns) is destroyed, leading to a warning message.
Vulnerability Detail
The vulnerability arises when a non-initial netns is destroyed in the RDMA/ipoib driver. This can trigger a warning message, indicating a potential issue with the destruction process. While the impact and attack plausibility have not been proven, this warning could be an indication of a security vulnerability. The vulnerability was introduced in Linux Kernel version 5.10 and has been fixed in version 5.12.11.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The RDMA/ipoib vulnerability in the Kernel, which caused a warning message when destroying non-initial netns, has been fixed in version 5.12.11. It is recommended to update the Kernel to this version or later to address the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA (Remote Direct Memory Access) is a technology that allows for high-speed data transfer between remote systems.
ipoib (IP over InfiniBand) is a network driver in the Kernel that enables IP communication over InfiniBand networks.
A netns (network namespace) is a feature in the Linux Kernel that allows for the isolation and separation of network resources.
The impact of this vulnerability is not yet proven. It is a warning message that could indicate a potential security vulnerability.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it in real-time.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
