Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-47616

RDMA: Fix use-after-free in rxe_queue_cleanup

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxe_queue_cleanup On error handling path in rxe_qp_from_init() qp->sq.queue is freed and then rxe_create_qp() will drop last reference to this object. qp clean up function will try to free this queue one time and it causes UAF bug. Fix it by zeroing queue pointer after freeing queue in rxe_qp_from_init().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 514aee660df493cd673154a6ba6bab745ec47b8c to < acb53e47db1fbc7cd37ab10b46388f045a76e383affected
  • 514aee660df493cd673154a6ba6bab745ec47b8c to < 84b01721e8042cdd1e8ffeb648844a09cd4213e0affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.10 to ≤ 5.15.*unaffected
  • 5.16 to ≤ *unaffected

References