Linux bnxt_re RoCE driver (bnxt_re_create_srq memory leak): A tenant can exhaust host memory by repeatedly triggering

Impact

A tenant can exhaust host memory by repeatedly triggering shared-receive-queue creation failures through the RDMA verbs interface. This is a straightforward noisy-neighbour denial of service available to any container or VM granted RDMA access, and it needs no privilege beyond opening verbs.

Who can reach it

Any local process with access to the RDMA verbs device — in practice, any tenant container given RDMA.

What to do

Kernel upgrade plus host reboot. Independently: apply memory cgroup limits to RDMA-capable workloads and restrict verbs device access to workloads that actually need it — both container-runtime config changes, and both good practice regardless of this CVE.

References