Описание
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix the memleak while create new ctrl failed Now while we create new ctrl failed, we have not free the tagset occupied by admin_q, here try to fix it.
Отчет
A low severity memory leak was found in the Linux kernel's NVMe over TCP (nvme-tcp) driver. When the creation of a new nvme-tcp controller fails, the tagset occupied by the controller's admin queue is not freed, so each failed controller creation attempt leaks kernel memory. Exploiting this requires local access to repeatedly trigger failed nvme-tcp controller creation on an affected host, and the consequence is gradual kernel memory exhaustion leading to system resource pressure and degradation of availability. Red Hat assesses the impact of this flaw as Low; this is lower than the CVE.org rating of Important (CVSS 7.5), which is based on a network attack vector that does not match the local nature of this issue. This issue affects the Red Hat Enterprise Linux 9 kernel and kernel-rt packages, where the fix is currently deferred given the low severity and the limited practical impact; the residual risk is gradual memory growth only on systems that repeatedly attempt to create nvme-tcp controllers that fail. Red Hat Enterprise Linux 6, 7, and 8, and the Hosted OpenShift Clusters (ARO and OSD) environments, are listed as not affected.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix the memleak while create new ctrl failed Now while we create new ctrl failed, we have not free the tagset occupied by admin_q, here try to fix it.
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix the memleak while create new ctrl failed Now while we create new ctrl failed, we have not free the tagset occupied by admin_q, here try to fix it.
In the Linux kernel, the following vulnerability has been resolved: n ...
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix the memleak while create new ctrl failed Now while we create new ctrl failed, we have not free the tagset occupied by admin_q, here try to fix it.
Уязвимость функции nvme_tcp_setup_ctrl() модуля drivers/nvme/host/tcp.c - драйвера поддержки NVME ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.1 Medium
CVSS3