A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-livepatch-4.14.262-200.489Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Oct 17, 2023 | Mar 27, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Feb 22, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 5, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | May 10, 2023 | Mar 27, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 5, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-vanillaUpgrade kernel-defaultUpgrade dtb-zteUpgrade dtb-alUpgrade kernel-preempt-develUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-zfcpdump-manUpgrade kernel-debug-baseUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-baseUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-extraUpgrade kernel-vanilla-devel | Apr 11, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-gkeopUpgrade linux-raspiUpgrade linux-fipsUpgrade linux-snapdragonUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-gkeUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-raspi2Upgrade linux-awsUpgrade linux-dell300xUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-azure-fdeUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-ibmUpgrade linux-hweUpgrade linux-bluefield | Nov 19, 2024 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 9, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub