Memory Leak in RDMA/cma in Linux Kernel
Summary
GSD-2021-1001487: RDMA/cma: Fix rdma_resolve_route() memory leak. Affects Kernel versions < 40b613db3a95bc27998e4097d74c2f7e5d083a0b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Linux operating system, responsible for managing system resources and providing an interface for applications to interact with the hardware. RDMA (Remote Direct Memory Access) is a technology that allows for high-speed data transfer between remote systems without involving the CPU. RDMA/cma (RDMA Connection Manager) is a component of the Linux Kernel that handles the establishment and management of RDMA connections. This vulnerability affects the RDMA/cma module in the Linux Kernel.
Vulnerability Detail
The vulnerability in RDMA/cma is related to a memory leak issue in the rdma_resolve_route() function. When this function is called to resolve the route for an RDMA connection, it may fail to release allocated memory in certain scenarios, leading to a memory leak. An attacker could potentially exploit this vulnerability to exhaust system memory resources, causing denial of service conditions or other unpredictable behavior. The vulnerability has been fixed in Linux Kernel version v4.4.276 by commit 40b613db3a95bc27998e4097d74c2f7e5d083a0b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The memory leak vulnerability in RDMA/cma in the Linux Kernel can be mitigated by updating to version v4.4.276 or later. It is important to promptly apply security patches and updates to ensure the stability and security of systems utilizing RDMA/cma. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially lead to memory exhaustion, causing denial of service conditions or other unpredictable behavior in systems utilizing RDMA/cma.
The vulnerability itself does not involve remote exploitation. However, if an attacker gains access to a system with RDMA/cma enabled, they could potentially exploit this vulnerability locally.
The vulnerability is present in versions of the Linux Kernel prior to v4.4.276. It has been fixed in this version and subsequent releases.
There is no evidence of active exploitation of this vulnerability at the time of this report. However, it is always recommended to apply security patches and updates to mitigate potential risks.
For more information about this vulnerability, you can refer to the source provided by the Cloud Security Alliance's GSD database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1001xxx/GSD-2021-1001487.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
