Intel irdma driver (Ethernet Controller RDMA for Linux): Improper access control in the Intel RDMA driver lets an

Impact

Improper access control in the Intel RDMA driver lets an unauthenticated user escalate privilege. RDMA is the transport for collective operations across an AI cluster, and the driver maps queue pairs directly into user processes - so an access-control failure here is one workload reaching another's RDMA resources on the same host.

Who can reach it

Unauthenticated, which on an RDMA fabric means anything that can present traffic to the verbs interface. Treat the RDMA fabric as an authentication boundary that is not actually authenticating.

What to do

Update the Intel irdma driver to 1.9.30 or later. Module reload drops RDMA connections and kills in-flight collectives - drain the node. No firmware component for this one.

References