Fix a deadlock in RDMA/ib_srp
Summary
GSD-2022-1000949: RDMA/ib_srp: Fix a deadlock. Affects Kernel versions >= ef6c49d87c3418c442a22e55e3ce2f91b163d69e, < 8cc342508f9e7fdccd2e9758ae9d52aff72dab7f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/ib_srp package is a component of the Linux Kernel that provides support for SCSI RDMA Protocol (SRP) over InfiniBand. It allows for high-performance block storage access over RDMA-capable networks. The package is widely used in Linux-based systems for efficient storage communication.
Vulnerability Detail
The vulnerability in RDMA/ib_srp is a deadlock issue that can lead to system instability and unresponsiveness. It occurs due to a flaw in the code that can cause a deadlock situation, where multiple threads or processes are stuck waiting for each other to release resources. This can result in a complete system freeze or a significant degradation in performance.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. The recommended approach is to update the Linux Kernel to the fixed version.
Conclusion
The RDMA/ib_srp package in the Linux Kernel is vulnerable to a deadlock issue that can cause system instability. It is crucial to update the kernel to version v4.9.304 or later to fix this vulnerability and ensure the system remains stable and responsive. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/ib_srp is a component of the Linux Kernel that enables SCSI RDMA Protocol (SRP) over InfiniBand, allowing for high-performance block storage access over RDMA-capable networks.
The vulnerability can lead to system instability and unresponsiveness, potentially resulting in a complete system freeze or a significant degradation in performance.
To fix this vulnerability, update the Linux Kernel to version v4.9.304 or later, which includes the necessary fix for the deadlock issue.
No, there is no specific workaround available for this vulnerability. Updating the Linux Kernel is the recommended solution.
You can find more information about this vulnerability in the Open Source Vulnerability Database (OSVDB) entry with ID GSD-2022-1000949.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
