Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was registered before that state was initialized, while teardown released the buffer before free_irq() synchronized the handler. Initialize the EQ without arming it, register the IRQ, and then arm it. Reverse the resource order during teardown by freeing the IRQ before destroying the EQ.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2a152512a155aaf27c3e67834ffafaed9525a7b5 to < 3cd652dfcd822af26ba75d6d2d245ea7f73b499eaffected2a152512a155aaf27c3e67834ffafaed9525a7b5 to < c767e2812cac83fef70fb8932c3f0fe97dff9388affected2a152512a155aaf27c3e67834ffafaed9525a7b5 to < 795eb34bfd8b1ab347adc41a11e4bb97c3ac0ce6affected2a152512a155aaf27c3e67834ffafaed9525a7b5 to < 38871ff47e2a02f8d9a333a65f358d987247b5b0affected2a152512a155aaf27c3e67834ffafaed9525a7b5 to < 9ecd3dcbdf1f315aadc049b291f59c79dc478062affected2a152512a155aaf27c3e67834ffafaed9525a7b5 to < e22a3627b7151754f07f90ea3d1ab6e85f5d93f4affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3cd652dfcd822af26ba75d6d2d245ea7f73b499e ↗
- https://git.kernel.org/stable/c/c767e2812cac83fef70fb8932c3f0fe97dff9388 ↗
- https://git.kernel.org/stable/c/795eb34bfd8b1ab347adc41a11e4bb97c3ac0ce6 ↗
- https://git.kernel.org/stable/c/38871ff47e2a02f8d9a333a65f358d987247b5b0 ↗
- https://git.kernel.org/stable/c/9ecd3dcbdf1f315aadc049b291f59c79dc478062 ↗
- https://git.kernel.org/stable/c/e22a3627b7151754f07f90ea3d1ab6e85f5d93f4 ↗