RDMA/ucma: Protect mc during concurrent multicast leaves
Summary
GSD-2022-1000667: RDMA/ucma: Protect mc during concurrent multicast leaves. Affects Kernel versions >= 95fe51096b7adf1d1e7315c49c75e2f75f162584, < ee2477e8ccd3d978eeac0dc5a981b286d9bb7b0a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/ucma package is a component of the Linux Kernel that provides user-space applications with an interface to perform Remote Direct Memory Access (RDMA) operations. RDMA allows for high-speed data transfers between remote systems without involving the CPU. The ucma (User-mode Communication Access) subsystem within RDMA/ucma is responsible for managing communication channels between user-space applications and RDMA devices. This vulnerability affects the multicast (mc) functionality of ucma.
Vulnerability Detail
The vulnerability in RDMA/ucma's multicast functionality arises when multiple concurrent multicast leaves are performed. The mc object, which represents a multicast group, is not adequately protected during these operations, potentially leading to memory corruption or other security issues. An attacker could exploit this vulnerability to execute arbitrary code, escalate privileges, or cause a denial-of-service condition. The vulnerability was introduced in version v5.10 of the Linux Kernel and has been fixed in version v5.16.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in RDMA/ucma's multicast functionality can be mitigated by updating the Linux Kernel to version v5.16.8 or later. This update includes the necessary fix to protect the mc object during concurrent multicast leaves. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/ucma is a component of the Linux Kernel that provides user-space applications with an interface for performing Remote Direct Memory Access (RDMA) operations. It allows for high-speed data transfers between remote systems without involving the CPU.
Multicast in RDMA/ucma refers to the ability to send a single message to multiple recipients simultaneously. It is commonly used in scenarios where data needs to be distributed to a group of recipients efficiently.
The vulnerability arises when multiple concurrent multicast leaves are performed in RDMA/ucma. The mc object, which represents a multicast group, is not adequately protected during these operations, potentially leading to memory corruption or other security issues.
Exploiting this vulnerability could allow an attacker to execute arbitrary code, escalate privileges, or cause a denial-of-service condition.
Yes, the vulnerability has been fixed in version v5.16.8 of the Linux Kernel. Users are advised to update to this version or later to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
