CVE-2024-40992: RDMA/rxe: Fix responder length checking for UD request packets
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix responder length checking for UD request packets
According to the IBA specification: If a UD request packet is detected with an invalid length, the request shall be an invalid request and it shall be silently dropped by the responder. The responder then waits for a new request packet.
commit 689c5421bfe0 ("RDMA/rxe: Fix incorrect responder length checking") defers responder length check for UD QPs in function copydata. But it introduces a regression issue for UD QPs.
When the packet size is too large to fit in the receive buffer. copydata will return error code -EINVAL. Then senddatain will return RESPSTERRMALFORMEDWQE. UD QP will transfer into ERROR state.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernel RDMA/rxeto a version that resolves this vulnerability.Patch commit 689c5421bfe0 (
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40992?
CVE-2024-40992 is categorized with a severity that indicates a potential impact on the confidentiality and integrity of systems using affected Linux kernel versions.
How do I fix CVE-2024-40992?
To fix CVE-2024-40992, update the Linux kernel to the patched versions which include 5.10.223-1, 6.1.128-1, or any later stable releases.
Which Linux kernel versions are affected by CVE-2024-40992?
CVE-2024-40992 affects specific versions including 5.10.223-1, 5.10.226-1, 6.1.123-1, and 6.1.128-1, among others.
What is the main issue described in CVE-2024-40992?
CVE-2024-40992 addresses a vulnerability in the RDMA/rxe module related to improper length checking for UD request packets.
Is CVE-2024-40992 related to security risks in RDMA?
Yes, CVE-2024-40992 poses security risks in RDMA (Remote Direct Memory Access) operations due to potential invalid request handling.