Intel RDMA driver for Ethernet X722 and 800 series (Linux): Improper input validation in the Intel RDMA Linux driver

Impact

Improper input validation in the Intel RDMA Linux driver gives an authenticated user privilege escalation. Earlier member of the same family as the irdma access-control issue and the same reason to care: RDMA queue pairs are mapped into userspace by design.

Who can reach it

Authenticated local user with access to the RDMA verbs interface.

What to do

Update the Intel RDMA driver to 1.3.19 or later. Module reload drops RDMA links - drain first.

References

Related entries

• BMC firmware on the HPE Cloudline whitebox line: An attacker directs the BMC's video-deletion routine at arbitraryCVE-2021-25124 · BMC firmware on the HPE Cloudline whitebox lineHigh
• AMD PSP boot ROM - integrity of decrypted firmware image: The PSP boot ROM authenticates and decrypts firmware but doesCVE-2021-26315 · AMD PSP boot ROM - integrity of decrypted firmware imageHigh
• AMD SEV-ES Trusted Memory Region - SNP guest memory integrity: A bug in the SEV-ES Trusted Memory Region handling costsCVE-2021-26324 · AMD SEV-ES Trusted Memory Region - SNP guest memory integrityHigh
• AMD Secure Processor (ASP) bootloader - image header parsing: The ASP bootloader reads and acts on fields from aCVE-2021-26335 · AMD Secure Processor (ASP) bootloader - image header parsingHigh
• AMD Secure Processor - SoC security-configuration registers: A local attacker can make unauthorised changes to theCVE-2021-26360 · AMD Secure Processor - SoC security-configuration registersHigh
• AMD SEV-ES - bounds checking on Reverse Map table memory: Insufficient bounds checking in SEV-ES lets an attackerCVE-2021-26409 · AMD SEV-ES - bounds checking on Reverse Map table memoryHigh