A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdma_cm device node. While this access is unlikely to leak sensitive user information, it can be further used to defeat existing kernel protection mechanisms.
CVSS Details
- CVSS 3.1 Base Score: 2.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.43-20.103Upgrade perfUpgrade kernel-livepatch-4.14.262-200.489Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade bpftool-debuginfo | Oct 17, 2023 | Mar 27, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Feb 22, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 5, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | May 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | May 10, 2023 | Mar 27, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 5, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-vanilla-develUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-vanillaUpgrade kernel-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade dtb-alUpgrade kernel-debug-baseUpgrade dtb-zteUpgrade kernel-default | Apr 11, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-dell300xUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-azure-fdeUpgrade linux-fipsUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-raspi2Upgrade linux-snapdragon | Nov 19, 2024 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 9, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub