CVE-2024-53094: RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Add sendpageok() check to disable MSGSPLICEPAGES
While running ISER over SIW, the initiator machine encounters a warning from skbsplicefromiter() indicating that a slab page is being used in sendpage. To address this, it is better to add a sendpageok() check within the driver itself, and if it returns 0, then MSGSPLICEPAGES flag should be disabled before entering the network stack.
A similar issue has been discussed for NVMe in this thread: https://lore.kernel.org/all/20240530142417.146696-1-ofir.gal@volumez.com/
WARNING: CPU: 0 PID: 5342 at net/core/skbuff.c:7140 skbsplicefromiter+0x173/0x320 Call Trace: tcpsendmsglocked+0x368/0xe40 siwtxhdt+0x695/0xa40 [siw] siwqpsqprocess+0x102/0xb00 [siw] siwsqresume+0x39/0x110 [siw] siwrunsq+0x74/0x160 [siw] kthread+0xd2/0x100 retfromfork+0x34/0x40 retfromforkasm+0x1a/0x30
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.25-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.64.2-1 - Configuration
In the RDMA/siw driver, add a sendpage_ok() check; if sendpage_ok() returns 0, disable the MSG_SPLICE_PAGES flag before entering the network stack to avoid the slab page warning from skb_splice_from_iter() during ISER over SIW.
Linux kernel RDMA/siw driver MSG_SPLICE_PAGES = disabled when sendpage_ok() indicates it is not safe
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53094?
CVE-2024-53094 has been rated with a moderate severity level due to its impact on the Linux kernel.
How do I fix CVE-2024-53094?
To fix CVE-2024-53094, update the Linux kernel to a version higher than 6.6.62 or within the safe versions outside the affected range.
Which versions of Linux Kernel are affected by CVE-2024-53094?
CVE-2024-53094 affects Linux kernel versions between 6.7 and 6.11.9, as well as specific release candidates 6.12-rc1, 6.12-rc2, and 6.12-rc3.
What is the nature of the vulnerability in CVE-2024-53094?
CVE-2024-53094 involves a warning during the use of ISER over SIW that relates to a slab page being improperly used in sendpage_ok().
Is CVE-2024-53094 related to RDMA operations?
Yes, CVE-2024-53094 is specifically related to Remote Direct Memory Access (RDMA) operations within the Linux kernel.