Use-after-free vulnerability in nvme-rdma
Summary
GSD-2022-1000543: nvme-rdma: fix possible use-after-free in transport error_recovery work. Affects Kernel versions < ea86027ac467a055849c4945906f799e7f65ab99. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The nvme-rdma is a transport module in the Linux Kernel that allows NVMe devices to communicate over RDMA (Remote Direct Memory Access) networks. RDMA provides low-latency and high-bandwidth communication between devices. The nvme-rdma module enables NVMe devices to take advantage of these benefits. However, a use-after-free vulnerability has been discovered in the transport error_recovery work of nvme-rdma.
Vulnerability Detail
The use-after-free vulnerability in nvme-rdma occurs when the transport error_recovery work is executed. This vulnerability could allow an attacker to exploit a freed memory region, leading to a potential crash or arbitrary code execution. The exact impact and attack plausibility have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.16.11 by commit ea86027ac467a055849c4945906f799e7f65ab99.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The use-after-free vulnerability in nvme-rdma has been fixed in Linux Kernel version v5.16.11. It is recommended to update the kernel to ensure the system is protected against this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
nvme-rdma is a transport module in the Linux Kernel that enables NVMe devices to communicate over RDMA networks, providing low-latency and high-bandwidth communication.
A use-after-free vulnerability occurs when a program continues to use a memory region after it has been freed. This can lead to crashes, memory corruption, or arbitrary code execution.
The impact of this vulnerability is not yet proven. However, it could potentially lead to crashes or arbitrary code execution.
Yes, this vulnerability has been fixed in Linux Kernel version v5.16.11 by commit ea86027ac467a055849c4945906f799e7f65ab99.
To update the Linux Kernel, you can pull the latest changes from the official Linux Kernel repository and rebuild/install the updated kernel on the affected system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
