User-after-free vulnerability in RDMA/irdma package
Summary
GSD-2021-1002722: RDMA/irdma: Fix a user-after-free in add_pble_prm. Affects Kernel versions >= e8c4dbc2fcacf5a7468d312168bb120c27c38b32, < 11eebcf63e98fcf047a876a51d76afdabc3b8b9b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/irdma package is a component of the Linux Kernel that provides support for Remote Direct Memory Access (RDMA) technology. RDMA allows for high-speed, low-latency data transfers between remote systems. The irdma module specifically handles the InfiniBand RDMA protocol. It is responsible for managing the InfiniBand hardware and providing the necessary functionality for applications to utilize RDMA capabilities.
Vulnerability Detail
The vulnerability identified in the RDMA/irdma package is a user-after-free issue in the 'add_pble_prm' function. This vulnerability was introduced in version v5.14 of the Linux Kernel by commit e8c4dbc2fcacf5a7468d312168bb120c27c38b32 and affects all subsequent versions until v5.15.10, where it was fixed by commit 11eebcf63e98fcf047a876a51d76afdabc3b8b9b. A user-after-free vulnerability occurs when a program continues to reference memory after it has been freed, potentially leading to a use-after-free condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the RDMA/irdma module if it is not required for their system. This can be done by blacklisting the 'irdma' module in the kernel configuration or by preventing it from loading at boot time. However, this workaround should only be considered if RDMA functionality is not essential for the system, as it will disable RDMA capabilities entirely.
Conclusion
In conclusion, the RDMA/irdma package in the Linux Kernel is affected by a user-after-free vulnerability in the 'add_pble_prm' function. This vulnerability can be fixed by updating the kernel to version v5.15.10 or later. A temporary workaround is available by disabling the RDMA/irdma module if it is not required. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/irdma is a component of the Linux Kernel that provides support for Remote Direct Memory Access (RDMA) technology. It enables high-speed, low-latency data transfers between remote systems using the InfiniBand RDMA protocol.
A user-after-free vulnerability occurs when a program continues to reference memory after it has been freed. This can lead to a use-after-free condition, potentially allowing an attacker to execute arbitrary code or cause a denial-of-service condition.
To fix the vulnerability, it is recommended to update the Linux Kernel to version v5.15.10 or later. This can be done by obtaining the updated kernel source code and compiling it according to the provided instructions.
Yes, as a temporary workaround, users can disable the RDMA/irdma module if it is not required for their system. This can be done by blacklisting the 'irdma' module in the kernel configuration or by preventing it from loading at boot time.
Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition on systems utilizing the RDMA/irdma module.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
