RDMA/ib_srp: Fix a deadlock in Linux Kernel
Summary
GSD-2022-1000885: RDMA/ib_srp: Fix a deadlock. Affects Kernel versions >= ef6c49d87c3418c442a22e55e3ce2f91b163d69e, < 901206f71e6ad2b2e7accefc5199a438d173c25f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA (Remote Direct Memory Access) subsystem in the Linux Kernel provides a mechanism for high-performance, low-latency communication between remote systems. RDMA enables direct memory access from the memory of one computer into that of another without involving either one's operating system. The ib_srp module is responsible for SCSI RDMA Protocol (SRP) support over InfiniBand or RoCE (RDMA over Converged Ethernet) networks. SRP allows SCSI commands to be transported over RDMA networks, providing efficient block-level storage access.
The vulnerability in the RDMA/ib_srp module can lead to a deadlock situation. A deadlock occurs when two or more processes are unable to proceed because each is waiting for the other to release a resource. In this case, the deadlock can occur due to a specific code path in the ib_srp module, potentially leading to a system freeze or unresponsiveness.
Vulnerability Detail
The vulnerability in the RDMA/ib_srp module is caused by a deadlock situation. When certain conditions are met, multiple processes can get stuck waiting for each other to release resources, resulting in a deadlock. This can lead to a system freeze or unresponsiveness, impacting the availability and reliability of the system.
The vulnerability was introduced in version v3.8 of the Linux Kernel by commit ef6c49d87c3418c442a22e55e3ce2f91b163d69e. It has been fixed in version v5.4.182 by commit 901206f71e6ad2b2e7accefc5199a438d173c25f.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can avoid using the RDMA/ib_srp module if it is not essential for their system's functionality. Disabling the module can be achieved by blacklisting it or removing it from the kernel configuration. However, this workaround should only be considered if the module is not required, as it may impact the functionality of certain applications or systems that rely on SRP support.
Conclusion
The RDMA/ib_srp module in the Linux Kernel is vulnerable to a deadlock situation, which can lead to a system freeze or unresponsiveness. It is crucial to update the Linux Kernel to version v5.4.182 or later to mitigate this vulnerability. Alternatively, users can consider avoiding the use of the RDMA/ib_srp module if it is not necessary for their system's functionality. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The RDMA/ib_srp module is responsible for SCSI RDMA Protocol (SRP) support over InfiniBand or RoCE networks. It allows SCSI commands to be transported over RDMA networks, providing efficient block-level storage access.
A deadlock occurs when two or more processes are unable to proceed because each is waiting for the other to release a resource. In this case, the deadlock can occur due to a specific code path in the ib_srp module.
The vulnerability can lead to a system freeze or unresponsiveness, impacting the availability and reliability of the system.
To fix the vulnerability, it is recommended to update the Linux Kernel to version v5.4.182 or later. Alternatively, users can avoid using the RDMA/ib_srp module if it is not essential for their system's functionality.
Yes, as a workaround, users can avoid using the RDMA/ib_srp module by blacklisting it or removing it from the kernel configuration. However, this should only be considered if the module is not required.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
