Use After Free Vulnerability in RDMA/siw Package
Summary
UVI-2021-1000342: RDMA/siw: Fix a use after free in siw_alloc_mr. Affects Kernel versions >= 2251334dcac9eb337575d8767e2a6a7e81848f7f, < 608a4b90ece039940e9425ee2b39c8beff27e00c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The RDMA/siw package is a component of the Linux Kernel that provides support for Remote Direct Memory Access (RDMA) over the Softiwarp protocol. RDMA allows for high-speed data transfers between remote systems without involving the CPU, resulting in improved performance. The siw_alloc_mr function in the siw driver is responsible for allocating memory regions for RDMA operations.
Vulnerability Detail
The siw_alloc_mr function in the RDMA/siw package suffers from a use after free vulnerability. This vulnerability was introduced in version v5.3 of the Linux Kernel and was fixed in version v5.10.37. The vulnerability occurs when the siw_alloc_mr function improperly handles memory regions, leading to a use after free condition. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the patched version to mitigate the risk.
Conclusion
The use after free vulnerability in the siw_alloc_mr function of the RDMA/siw package can be mitigated by updating the Linux Kernel to version v5.10.37 or later. It is crucial to apply this update to protect against potential arbitrary code execution or denial of service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
RDMA (Remote Direct Memory Access) is a technology that allows for high-speed data transfers between remote systems without involving the CPU. It enables efficient data movement and reduces latency, resulting in improved performance.
The siw_alloc_mr function is part of the RDMA/siw package in the Linux Kernel. It is responsible for allocating memory regions for RDMA operations.
The use after free vulnerability in the siw_alloc_mr function occurs when it improperly handles memory regions, leading to a situation where freed memory is still accessed. This can result in arbitrary code execution or denial of service.
If exploited, this vulnerability could allow an attacker to execute arbitrary code or cause a denial of service on the affected system.
To mitigate the risk, it is recommended to update the Linux Kernel to version v5.10.37 or later, which includes the necessary patch to address the use after free vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
