UBUNTU-CVE-2021-47345: Medium severity ubuntu/linux-azure vulnerability

Q: What conditions are required to trigger the memory leak?

An attacker or local process needs the ability to use RDMA connection management and invoke rdma_resolve_route() multiple times on the same rdma_cm_id. The repeated call becomes possible when cma_query_handler() causes an RDMA_CM_EVENT_ROUTE_ERROR event that returns the state machine to a state where route resolution can be attempted again.

Q: What is the practical impact of successful exploitation?

The issue leaks memory and can affect system availability. The supplied severity vector indicates local attack access, low attack complexity, low privileges required, no user interaction, and high availability impact.

Q: Which Ubuntu kernel packages are identified as affected?

The listed packages are ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

Published May 21, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix rdmaresolveroute() memory leak Fix a memory leak when "mdaresolveroute() is called more than once on the same "rdmacmid". This is possible if cmaqueryhandler() triggers the RDMACMEVENTROUTEERROR flow which puts the state machine back and allows rdmaresolveroute() to be called again.

Affected Software

118 affected componentsFixes available

ubuntu/linux-azure<4.15.0-1123.136~14.04.1

4.15.0-1123.136~14.04.1

ubuntu/linux*

ubuntu/linux-aws<4.4.0-1147.153

4.4.0-1147.153

ubuntu/linux-lts-xenial<4.4.0-272.306~14.04.1

4.4.0-272.306~14.04.1

ubuntu/linux<4.4.0-272.306

4.4.0-272.306

ubuntu/linux-aws<4.4.0-1185.200

4.4.0-1185.200

ubuntu/linux-aws-hwe<4.15.0-1111.118~16.04.1

4.15.0-1111.118~16.04.1

ubuntu/linux-azure<4.15.0-1123.136~16.04.1

4.15.0-1123.136~16.04.1

ubuntu/linux-gcp<4.15.0-1108.122~16.04.1

4.15.0-1108.122~16.04.1

ubuntu/linux-hwe<4.15.0-156.163~16.04.1

4.15.0-156.163~16.04.1

ubuntu/linux-kvm<4.4.0-1148.159

4.4.0-1148.159

ubuntu/linux-oracle<4.15.0-1080.88~16.04.1

4.15.0-1080.88~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1117.124

4.4.0-1117.124

ubuntu/linux-fips*

ubuntu/linux<4.15.0-156.163

4.15.0-156.163

ubuntu/linux-aws<4.15.0-1111.118

4.15.0-1111.118

ubuntu/linux-aws-5.4<5.4.0-1056.59~18.04.1

5.4.0-1056.59~18.04.1

ubuntu/linux-azure-4.15<4.15.0-1123.136

4.15.0-1123.136

ubuntu/linux-azure-5.4<5.4.0-1058.60~18.04.1

5.4.0-1058.60~18.04.1

ubuntu/linux-gcp-4.15<4.15.0-1108.122

4.15.0-1108.122

ubuntu/linux-gcp-5.4<5.4.0-1052.56~18.04.1

5.4.0-1052.56~18.04.1

ubuntu/linux-hwe-5.4<5.4.0-84.94~18.04.1

5.4.0-84.94~18.04.1

ubuntu/linux-kvm<4.15.0-1099.101

4.15.0-1099.101

ubuntu/linux-oracle<4.15.0-1080.88

4.15.0-1080.88

ubuntu/linux-oracle-5.4<5.4.0-1054.58~18.04.1

5.4.0-1054.58~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1043.47~18.04.1

5.4.0-1043.47~18.04.1

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-fips<4.15.0-2053.55

4.15.0-2053.55

ubuntu/linux-azure-fips<4.15.0-2035.39

4.15.0-2035.39

ubuntu/linux-fips<4.15.0-1069.78

4.15.0-1069.78

ubuntu/linux-gcp-fips<4.15.0-2018.20

4.15.0-2018.20

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-84.94

5.4.0-84.94

ubuntu/linux-aws<5.4.0-1056.59

5.4.0-1056.59

ubuntu/linux-azure<5.4.0-1058.60

5.4.0-1058.60

ubuntu/linux-bluefield<5.4.0-1019.22

5.4.0-1019.22

ubuntu/linux-gcp<5.4.0-1052.56

5.4.0-1052.56

ubuntu/linux-gkeop<5.4.0-1023.24

5.4.0-1023.24

ubuntu/linux-kvm<5.4.0-1046.48

5.4.0-1046.48

ubuntu/linux-oracle<5.4.0-1054.58

5.4.0-1054.58

ubuntu/linux-raspi<5.4.0-1043.47

5.4.0-1043.47

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1069.73+fips2

5.4.0-1069.73+fips2

ubuntu/linux-azure-fips<5.4.0-1073.76+fips1

5.4.0-1073.76+fips1

ubuntu/linux-fips<5.4.0-1033.38

5.4.0-1033.38

ubuntu/linux-gcp-fips<5.4.0-1067.71~20.04.1

5.4.0-1067.71~20.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-nvidia-6.2*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1123.136~14.04.1
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1147.153
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-272.306~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-272.306
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1185.200
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1111.118~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1123.136~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1108.122~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-156.163~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1148.159
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1080.88~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1117.124
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-156.163
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1111.118
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1056.59~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1123.136
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1058.60~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1108.122
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1052.56~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-84.94~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1099.101
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1080.88
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1054.58~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1043.47~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2053.55
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2035.39
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1069.78
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2018.20
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-84.94
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1056.59
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1058.60
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1019.22
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1052.56
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1023.24
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1046.48
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1054.58
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1043.47
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1069.73+fips2
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1073.76+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1033.38
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1067.71~20.04.1

Event History

May 21, 2024

CVE Published

via OSV·03:15 PM

Data Sourced

via OSV·03:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to trigger the memory leak?

An attacker or local process needs the ability to use RDMA connection management and invoke rdma_resolve_route() multiple times on the same rdma_cm_id. The repeated call becomes possible when cma_query_handler() causes an RDMA_CM_EVENT_ROUTE_ERROR event that returns the state machine to a state where route resolution can be attempted again.

What is the practical impact of successful exploitation?

The issue leaks memory and can affect system availability. The supplied severity vector indicates local attack access, low attack complexity, low privileges required, no user interaction, and high availability impact.

Which Ubuntu kernel packages are identified as affected?

The listed packages are ubuntu/linux, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-fips, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

UBUNTU-CVE-2021-47345: Medium severity ubuntu/linux-azure vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What conditions are required to trigger the memory leak?

What is the practical impact of successful exploitation?

Which Ubuntu kernel packages are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to trigger the memory leak?

What is the practical impact of successful exploitation?

Which Ubuntu kernel packages are identified as affected?