Описание
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
Sashiko points out that pd->uctx isn't initialized until late in the
function so all these error flow references are NULL and will crash. Use
the uctx that isn't NULL.
A flaw was found in the Linux kernel, specifically within the RDMA (Remote Direct Memory Access) ocrdma driver. This vulnerability arises from an uninitialized pointer in the ocrdma_copy_pd_uresp() function's error handling, which can lead to a NULL dereference. An attacker could exploit this to cause a system crash, resulting in a Denial of Service (DoS).
Отчет
This Moderate-severity flaw in the Linux kernel's RDMA ocrdma driver can lead to a system crash and denial of service. The vulnerability, caused by an uninitialized pointer in error handling, requires local access to a system with the ocrdma driver loaded for exploitation. Red Hat Enterprise Linux 6 and 7 are affected.
Меры по смягчению последствий
To prevent the ocrdma kernel module from loading, blacklist it by creating a file /etc/modprobe.d/blacklist-ocrdma.conf with the content blacklist ocrdma. After saving the file, regenerate the initramfs using dracut -f -v and reboot the system for the changes to take effect. This action may affect functionality dependent on the ocrdma driver and RDMA hardware.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | ||
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 7 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Fix deferred | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() Sashiko points out that pd->uctx isn't initialized until late in the function so all these error flow references are NULL and will crash. Use the uctx that isn't NULL.
In the Linux kernel, the following vulnerability has been resolved: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() Sashiko points out that pd->uctx isn't initialized until late in the function so all these error flow references are NULL and will crash. Use the uctx that isn't NULL.
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
In the Linux kernel, the following vulnerability has been resolved: R ...
In the Linux kernel, the following vulnerability has been resolved: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() Sashiko points out that pd->uctx isn't initialized until late in the function so all these error flow references are NULL and will crash. Use the uctx that isn't NULL.
EPSS
5.5 Medium
CVSS3