RDMA/cma: Fix rdma_resolve_route() memory leak in Kernel
Summary
GSD-2021-1001457: RDMA/cma: Fix rdma_resolve_route() memory leak. Affects Kernel versions < e2da8ce2a9543f3ca5c93369bd1fe6eeb572101a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that provides core functionalities and interfaces with hardware devices. It manages system resources, facilitates communication between software and hardware, and ensures the stability and security of the system. RDMA (Remote Direct Memory Access) is a technology that allows high-speed data transfer between remote systems without involving the CPU. RDMA/cma (RDMA Connection Manager) is a component of the Kernel that handles RDMA connection establishment and management. However, a vulnerability has been identified in the rdma_resolve_route() function of RDMA/cma, leading to a memory leak.
Vulnerability Detail
The vulnerability in the rdma_resolve_route() function of RDMA/cma can result in a memory leak. When this function is called, it fails to release allocated memory in certain scenarios, leading to a gradual depletion of system resources. An attacker could potentially exploit this vulnerability to exhaust system memory, causing a denial-of-service condition. The impact of this vulnerability can vary depending on the system's available resources and the attacker's ability to trigger the vulnerable function. It is important to note that the actual attack plausibility and impact have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the patch by updating the Linux Kernel to the fixed version.
Conclusion
The vulnerability in the rdma_resolve_route() function of RDMA/cma can result in a memory leak, potentially leading to a denial-of-service condition. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v4.9.276 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a critical component of the Linux operating system that manages system resources, facilitates communication between software and hardware, and ensures system stability and security.
RDMA (Remote Direct Memory Access) is a technology that enables high-speed data transfer between remote systems without involving the CPU, resulting in reduced latency and improved performance.
RDMA/cma (RDMA Connection Manager) is a component of the Kernel that handles RDMA connection establishment and management.
A memory leak occurs when a program fails to release allocated memory, leading to a gradual depletion of system resources. In this vulnerability, the rdma_resolve_route() function of RDMA/cma fails to release memory in certain scenarios, resulting in a memory leak.
The impact of this vulnerability can vary depending on the system's available resources and the attacker's ability to trigger the vulnerable function. It could potentially lead to a denial-of-service condition by exhausting system memory.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
