In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Fix connection failure handling
In case immediate MPA request processing fails, the newly created endpoint unlinks the listening endpoint and is ready to be dropped. This special case was not handled correctly by the code handling the later TCP socket close, causing a NULL dereference crash in siw_cm_work_handler() when dereferencing a NULL listener. We now also cancel the useless MPA timeout, if immediate MPA request processing fails.
This patch furthermore simplifies MPA processing in general: Scheduling a useless TCP socket read in sk_data_ready() upcall is now surpressed, if the socket is already moved out of TCP_ESTABLISHED state.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt | Jun 6, 2024 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 6, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-core | Jun 17, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-sprdUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-rt-livepatchUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-armUpgrade dtb-amazonUpgrade kernel-syms-azure | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidiaUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-nvidia-6.5Upgrade linux-azure-5.15Upgrade linux-oracle-6.5Upgrade linux-gkeop-5.15Upgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-hwe-5.15Upgrade linux-lowlatency-hwe-6.5Upgrade linux-azure-fipsUpgrade linux-starfiveUpgrade linux-iotUpgrade linux-oracleUpgrade linux-ibm-5.15Upgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-gcp-6.5Upgrade linux-hwe-6.5Upgrade linux-intel-iot-realtimeUpgrade linux-intel-iotgUpgrade linux-aws-5.4Upgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-laptopUpgrade linux-xilinx-zynqmpUpgrade linux-bluefieldUpgrade linux-oracle-5.15Upgrade linux-oem-6.5Upgrade linux-gcp-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-riscvUpgrade linux-nvidia-tegra-igxUpgrade linux-aws-5.15 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub