Junglewise Threat Intelligence

CVE-2024-47696: Linux Kernel RDMA deadlock in iwcm workqueue

CVE-2024-47696 · Severity: high · CVSS 7.8 · Published 2024-10-21

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's RDMA (Remote Direct Memory Access) component could allow a local attacker to cause a system deadlock. This issue occurs during specific memory management operations, potentially leading to a complete service outage or system instability. The flaw specifically affects systems using iWARP Connection Manager (iwcm) for high-performance networking.

Technical details

A deadlock vulnerability exists in the RDMA/iwcm component of the Linux kernel. The issue stems from the 'iwcm_wq' workqueue being created without the WQ_MEM_RECLAIM flag, while the 'flush_workqueue' function is subsequently called during paths that may involve memory reclamation. This violates forward-progress guarantees in the kernel's workqueue subsystem, specifically triggering a 'check_flush_dependency' warning and potential hang. An attacker with local access could potentially trigger this condition to cause a Denial of Service (DoS). The fix involves adding the WQ_MEM_RECLAIM flag to the workqueue allocation in 'drivers/infiniband/core/iwcm.c'.

Affected products

  • Linux Linux Kernel from 4.19.320 before 5.4

Timeline

  • 2024-08-20: patched: Initial patch authored by Zhu Yanjun
  • 2024-10-21: advisory: CVE-2024-47696 published in NVD

References

Related threats