Memory Leak in RDMA/cma in Linux Kernel
Summary
GSD-2021-1001428: RDMA/cma: Fix rdma_resolve_route() memory leak. Affects Kernel versions < e4e062da082a199357ba4911145f331d40139ad8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. RDMA (Remote Direct Memory Access) is a technology that allows direct memory access from the memory of one computer to the memory of another computer without involving the operating system. RDMA/cma (RDMA Connection Manager) is a component of the Linux Kernel that handles RDMA connection management.
RDMA/cma in the Linux Kernel is vulnerable to a memory leak in the rdma_resolve_route() function. This vulnerability can lead to memory exhaustion and potentially impact system stability and performance. An attacker may be able to exploit this vulnerability to cause a denial-of-service condition or other malicious activities.
Vulnerability Detail
The vulnerability in RDMA/cma arises from a memory leak in the rdma_resolve_route() function. When this function is called to resolve the route for an RDMA connection, it fails to release allocated memory in certain error scenarios. As a result, memory resources are not properly freed, leading to a memory leak.
The impact of this vulnerability can be significant, as it can result in memory exhaustion over time. This can degrade system performance and stability, potentially leading to system crashes or other adverse effects. An attacker may be able to exploit this vulnerability to exhaust system memory and disrupt normal system operation.
The vulnerability has been fixed in Linux Kernel version v4.14.240 by commit e4e062da082a199357ba4911145f331d40139ad8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel as mentioned in the 'how_to_fix' section.
Conclusion
The memory leak vulnerability in RDMA/cma in the Linux Kernel can lead to memory exhaustion and potential system instability. It is crucial to update the Linux Kernel to version v4.14.240 or later to mitigate this vulnerability. Failure to address this issue may result in performance degradation, system crashes, or other adverse effects. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/cma (RDMA Connection Manager) is a component of the Linux Kernel that handles RDMA connection management. It allows for direct memory access between computers without involving the operating system.
The vulnerability can lead to memory exhaustion, impacting system stability and performance. It can potentially result in system crashes or denial-of-service conditions.
An attacker may be able to exploit this vulnerability to exhaust system memory and disrupt normal system operation. This can be done by repeatedly triggering the vulnerable code path.
Yes, this vulnerability has been fixed in Linux Kernel version v4.14.240 by commit e4e062da082a199357ba4911145f331d40139ad8.
There are no known workarounds for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
