Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-47001

xprtrdma: Fix cwnd update ordering

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix cwnd update ordering After a reconnect, the reply handler is opening the cwnd (and thus enabling more RPC Calls to be sent) /before/ rpcrdma_post_recvs() can post enough Receive WRs to receive their replies. This causes an RNR and the new connection is lost immediately. The race is most clearly exposed when KASAN and disconnect injection are enabled. This slows down rpcrdma_rep_create() enough to allow the send side to post a bunch of RPC Calls before the Receive completion handler can invoke ib_post_recv().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to < eddae8be7944096419c2ae29477a45f767d0fcd4affected
  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to < 8834ecb5df22b7ff3c9b0deba7726579bb613f95affected
  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to < 19b5fa9489b5706bc878c3a522a7f771079e2fa0affected
  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to < 35d8b10a25884050bb3b0149b62c3818ec59f77caffected
  • 3791c5982ba1eebf2900ee7ca7b9a89619c26d54affected
  • 5.4.13 to < 5.5affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 5.10.38 to ≤ 5.10.*unaffected
  • 5.11.22 to ≤ 5.11.*unaffected
  • 5.12.5 to ≤ 5.12.*unaffected
  • 5.13 to ≤ *unaffected

References