RDMA/ib_srp: Fix a deadlock in Linux Kernel
Summary
GSD-2022-1000801: RDMA/ib_srp: Fix a deadlock. Affects Kernel versions >= ef6c49d87c3418c442a22e55e3ce2f91b163d69e, < c8b56e51aa91b8e7df3a98388dce3fdabd15c1d4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA (Remote Direct Memory Access) subsystem in the Linux Kernel provides a mechanism for high-speed data transfer between remote systems. RDMA enables applications to directly access the memory of a remote system without involving the operating system's CPU, resulting in reduced latency and improved performance. The ib_srp module is responsible for SCSI RDMA Protocol (SRP) target support over InfiniBand or RoCE (RDMA over Converged Ethernet). SRP allows SCSI commands to be transported over RDMA networks.
The vulnerability in the RDMA/ib_srp module can lead to a deadlock situation. A deadlock occurs when two or more processes are unable to proceed because each is waiting for the other to release a resource. In this case, the deadlock can occur during the execution of certain operations involving the ib_srp module, potentially leading to a system freeze or unresponsiveness.
Vulnerability Detail
The vulnerability in the RDMA/ib_srp module is caused by a deadlock situation. When certain operations involving the ib_srp module are executed, multiple processes can get stuck waiting for each other to release resources, resulting in a deadlock. This can lead to a system freeze or unresponsiveness, impacting the availability of the system.
The vulnerability was introduced in version v3.8 of the Linux Kernel by commit ef6c49d87c3418c442a22e55e3ce2f91b163d69e. It has been fixed in version v5.15.26 by commit c8b56e51aa91b8e7df3a98388dce3fdabd15c1d4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The RDMA/ib_srp module in the Linux Kernel is vulnerable to a deadlock situation, which can lead to a system freeze or unresponsiveness. It is crucial to update the Linux Kernel to version v5.15.26 or later to mitigate this vulnerability. Regularly updating the kernel is essential to ensure the latest security patches are applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA (Remote Direct Memory Access) is a technology that allows direct memory access from the memory of one computer to the memory of another computer without involving the operating system's CPU. ib_srp is a module in the Linux Kernel that provides support for SCSI RDMA Protocol (SRP) targets over InfiniBand or RDMA over Converged Ethernet (RoCE). SRP enables SCSI commands to be transported over RDMA networks.
A deadlock is a situation where two or more processes are unable to proceed because each is waiting for the other to release a resource. In the context of this vulnerability, a deadlock can occur during certain operations involving the RDMA/ib_srp module, leading to a system freeze or unresponsiveness.
The vulnerability can result in a system freeze or unresponsiveness, impacting the availability of the system. It can potentially disrupt critical operations and cause inconvenience to users.
You can check if your system is affected by this vulnerability by examining the version of the Linux Kernel you are running. If your kernel version is earlier than v5.15.26, it is recommended to update to the latest version to mitigate the vulnerability.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
