RDMA: Verify port when creating flow rule in Kernel
Summary
GSD-2021-1001037: RDMA: Verify port when creating flow rule. Affects Kernel versions >= 436f2ad05a0b65b1467ddf51bc68171c381bf844, < 8dc1b0e0ca204596c50bcd159ee069ae0f998176. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and supports various subsystems. RDMA (Remote Direct Memory Access) is a technology that allows direct memory access from one computer to another without involving the operating system. It is commonly used in high-performance computing and networking applications. In the Kernel, RDMA functionality is implemented through the RDMA subsystem, which includes drivers and protocols for RDMA communication. This vulnerability specifically affects the flow rule creation process in the RDMA subsystem.
Vulnerability Detail
The vulnerability arises from a failure to verify the port when creating a flow rule in the RDMA subsystem of the Kernel. This oversight could potentially allow an attacker to manipulate or bypass flow rules, leading to unauthorized access or denial of service. The vulnerability was introduced in version v3.12 of the Kernel and has been present until version v5.12.11. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.11 or later. This update includes a commit (8dc1b0e0ca204596c50bcd159ee069ae0f998176) that addresses the issue by implementing proper port verification when creating flow rules in the RDMA subsystem. Users can obtain the updated Kernel from the official Linux Kernel repository: Linux Kernel Repository
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the Kernel's RDMA subsystem, which allows for unauthorized manipulation or bypassing of flow rules, can be mitigated by updating to version v5.12.11 or later. It is crucial to promptly apply the recommended fix to ensure the security and integrity of the system. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA (Remote Direct Memory Access) is a technology that allows direct memory access from one computer to another without involving the operating system. It enables high-performance data transfers over networks.
The RDMA subsystem in the Kernel includes drivers and protocols for RDMA communication. It enables applications to utilize RDMA functionality for efficient data transfers.
A flow rule in RDMA is a set of conditions and actions that define how RDMA traffic should be handled. It helps in managing and controlling the flow of data in RDMA communication.
If exploited, this vulnerability could allow an attacker to manipulate or bypass flow rules in the RDMA subsystem, potentially leading to unauthorized access or denial of service.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities in software using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.