Memory Leak in RDMA/cma in Linux Kernel
Summary
GSD-2021-1001293: RDMA/cma: Fix rdma_resolve_route() memory leak. Affects Kernel versions < 3d08b5917984f737f32d5bee9737b9075c3895c6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for managing system resources and facilitating communication between hardware and software components. RDMA (Remote Direct Memory Access) is a feature in the Linux Kernel that enables high-speed data transfer between remote systems without involving the CPU. RDMA/cma (RDMA Connection Manager) is a component of RDMA that handles connection establishment and management. However, a memory leak vulnerability has been identified in the rdma_resolve_route() function of RDMA/cma.
Vulnerability Detail
The vulnerability in rdma_resolve_route() function of RDMA/cma can lead to a memory leak. When this function is called to resolve the route for a given destination, it fails to release allocated memory in certain scenarios, resulting in a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, leading to a denial-of-service condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the risk by updating their Linux Kernel to the fixed version as mentioned in the 'how_to_fix' section.
Conclusion
In conclusion, a memory leak vulnerability has been identified in the rdma_resolve_route() function of RDMA/cma in the Linux Kernel. This vulnerability can potentially lead to a denial-of-service condition by exhausting system memory resources. Users are advised to update their Linux Kernel to version v5.10.51 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is an open-source operating system kernel that forms the core of various Linux distributions. It provides essential functionality for managing system resources and facilitating communication between hardware and software components.
RDMA (Remote Direct Memory Access) is a feature in the Linux Kernel that enables high-speed data transfer between remote systems without involving the CPU. It allows for efficient and low-latency communication between networked devices.
RDMA/cma (RDMA Connection Manager) is a component of RDMA in the Linux Kernel that handles connection establishment and management. It provides APIs for resolving routes, establishing connections, and managing RDMA resources.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could lead to a denial-of-service condition by exhausting system memory resources.
To fix this vulnerability, users should update their Linux Kernel to version v5.10.51 or later, which includes the necessary fix for the memory leak issue. It is recommended to follow the official documentation or consult the Linux distribution provider for specific instructions on updating the Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
