PT-2021-8195 · Linux+2 · Linux Kernel+2
Ruozhu Li
·
Published
2021-09-14
·
Updated
2025-01-27
·
CVE-2021-47378
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the nvme-rdma function in the Linux kernel, where the destruction of the cm id before the qp can lead to a use-after-free condition. This occurs when the RDMA connection establishment error flow destroys the qp in the cm event handler, potentially causing the cm event to be received after the qp has been destroyed. To avoid this, the cm id should be destroyed before the qp, and in case of an error, the cm error should be reported to the upper level, allowing the qp to be destroyed after the cm id.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse