PT-2024-11105

CVE-2021-47001

·

Published

2021-04-26

·

Updated

2026-08-04

Description by

CVSS 4.0
8.2
High
MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the xprtrdma component in the Linux kernel. After a reconnect, the reply handler opens the cwnd, enabling more RPC Calls to be sent before rpcrdma post recvs() can post enough Receive WRs to receive their replies. This causes an RNR and the new connection is lost immediately. The race is most clearly exposed when KASAN and disconnect injection are enabled, slowing down rpcrdma rep create() enough to allow the send side to post a bunch of RPC Calls before the Receive completion handler can invoke ib post recv().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2024_1489-1
SUSE-SU-2024:1465-1
SUSE-SU-2024:1489-1
USN-7173-1
USN-7173-2
USN-7173-3
USN-7195-1
USN-7195-2
USN-7413-1
Found an issue in the description? Have something to add? Feel free to write us 👾