Junglewise Threat Intelligence

CVE-2024-27024: Linux Kernel RDS kernel warning in rds_conn_connect_if_down

CVE-2024-27024 · Severity: high · CVSS 7.8 · Published 2024-05-01

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability was identified in the Linux kernel's Reliable Datagram Sockets (RDS) protocol, which is used for high-performance data transfers. Under certain conditions, a failure to establish a connection during memory registration could trigger a system warning or instability. This could potentially allow a local user to cause a denial of service or impact system operations.

Technical details

The vulnerability exists in the net/rds component of the Linux kernel. Specifically, in the __rds_rdma_map function, if a connection is not yet established, the get_mr() call fails. The fix involves ensuring rds_conn_connect_if_down is triggered when a mapping failure occurs due to a missing device (-ENODEV), ensuring the connection is ready for subsequent retries. An attacker with local access could potentially exploit this logic error to trigger kernel warnings or cause a denial of service. The issue has been patched across multiple stable kernel branches.

Affected products

  • Linux Linux Kernel 3.18.85 to 6.7.10

Timeline

  • 2024-03-05: patched: Initial patch authored by Edward Adam Davis
  • 2024-05-01: disclosed: CVE published to NVD

References

Related threats