CVE-2024-40992

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the RDMA/rxe component of the Linux kernel, where a regression issue occurs when the packet size is too large to fit in the receive buffer. According to the IBA specification, if a UD request packet is detected with an invalid length, the request should be silently dropped by the responder. However, the copy data function introduces a regression issue for UD QPs, causing copy data to return an error code -EINVAL, and send data in to return RESPST ERR MALFORMED WQE, resulting in the UD QP transferring into an ERROR state. The vulnerability may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.