Описание
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Add a check for memory allocation
__alloc_pbl() can return error when memory allocation fails.
Driver is not checking the status on one of the instances.
A flaw was found in the RDMA/bnxt_re component of the Linux kernel. This vulnerability occurs because the driver fails to check the return status of a memory allocation function, __alloc_pbl(). A local attacker with administrative privileges could exploit this flaw, potentially leading to system instability or a denial of service.
Отчет
This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).
Меры по смягчению последствий
If RDMA functionality provided by the bnxt_re kernel module is not required, the module can be prevented from loading to mitigate this vulnerability.
To blacklist the bnxt_re module:
- Create a file
/etc/modprobe.d/blacklist-bnxt_re.confwith the following content:
- Regenerate the initramfs:
- For RHEL 8/9:
dracut -f -v - For RHEL 7:
dracut -f
- Reboot the system for the changes to take effect.
This mitigation will disable any functionality relying on the
bnxt_reRDMA driver.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Out of support scope | ||
| Red Hat Enterprise Linux 8 | kernel | Will not fix | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Will not fix | ||
| Red Hat Enterprise Linux 9 | kernel | Will not fix |
Показывать по
Дополнительная информация
Статус:
EPSS
6.7 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a check for memory allocation __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a check for memory allocation __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.
In the Linux kernel, the following vulnerability has been resolved: R ...
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a check for memory allocation __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.
EPSS
6.7 Medium
CVSS3