CVE-2021-3923

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the "/dev/infiniband/rdma cm" device node. This access is unlikely to leak sensitive user information but can be used to defeat existing kernel protection mechanisms. The issue is related to insufficient protection of internal data in the ib copy ah attr to user() function of the RDMA connection manager.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.