RDMA/hfi1: Fix kernel pointer leak in Linux Kernel
Summary
UVI-2021-1001720: RDMA/hfi1: Fix kernel pointer leak. Affects Kernel versions >= 042a00f93aad5874937e00f36e68301f7e3a0af1, < 714bfabe5f2901d96902e271d7217601fe4703e5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/hfi1 package is a component of the Linux Kernel that provides support for Remote Direct Memory Access (RDMA) over the HFI1 InfiniBand driver. RDMA allows for high-speed data transfers between remote systems with low latency. The hfi1 driver specifically supports Mellanox InfiniBand adapters. This vulnerability in the RDMA/hfi1 package involves a kernel pointer leak.
Vulnerability Detail
The vulnerability in the RDMA/hfi1 package is a kernel pointer leak. A kernel pointer leak occurs when a kernel-level memory address is unintentionally exposed to user-space. This can potentially allow an attacker to gain sensitive information or manipulate the kernel's memory. The vulnerability was introduced in version v5.13 of the Linux Kernel by commit 042a00f93aad5874937e00f36e68301f7e3a0af1 and was fixed in version v5.14.10 by commit 714bfabe5f2901d96902e271d7217601fe4703e5. The impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The RDMA/hfi1 package in the Linux Kernel was found to have a vulnerability involving a kernel pointer leak. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.14.10 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA/hfi1 is a component of the Linux Kernel that provides support for Remote Direct Memory Access (RDMA) over the HFI1 InfiniBand driver. It enables high-speed data transfers between remote systems with low latency.
A kernel pointer leak occurs when a kernel-level memory address is unintentionally exposed to user-space. This can potentially allow an attacker to gain sensitive information or manipulate the kernel's memory.
The impact of this vulnerability is currently unknown. It is important to update to the fixed version of the Linux Kernel to mitigate any potential risks.
To fix this vulnerability, update the Linux Kernel to version v5.14.10 or later by pulling the latest changes from the official Linux Kernel repository.
No workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
