GPU VulnDB

Database/Kernel, userspace & hypervisor

Linux kernel RDMA/siw: slab pages passed to MSG_SPLICE_PAGES trip a skb_splice_from_iter warning

CVSS 5.5CVE-2024-53094Kernel, userspace & hypervisorcurated

Impact

The software iWARP (siw) provider passed buffers backed by slab pages into tcp_sendmsg with MSG_SPLICE_PAGES, which skb_splice_from_iter refuses, producing a WARN in the siw TX kthread. The reported trigger is iSER over siw, i.e. storage traffic rather than an attack. Practical effect on a fleet is noisy kernel warnings and a disrupted siw send queue on nodes using software RDMA for iSER or NVMe-style storage access; the record claims availability impact only, and nodes running hardware RDMA (ConnectX/RoCE) rather than siw are not affected. Do not read this as a memory-corruption bug - the check exists precisely to refuse the unsafe page.

Who can reach it

Local and largely incidental: a workload driving RDMA traffic over the siw software provider, typically an iSER initiator. No authentication bypass and no remote vector is described in the record.

What to do

Update to a stable kernel containing the sendpage_ok() check in siw (linked commits) and reboot the node, or unload and reload the siw module with RDMA traffic quiesced. Nodes that do not load siw need no action. The record gives commits only, no fixed release string.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-53094https://git.kernel.org/stable/c/d5a019e819a0f0457570416bb2eb5f3321f5be81https://git.kernel.org/stable/c/4e1e3dd88a4cedd5ccc1a3fc3d71e03b70a7a791https://git.kernel.org/stable/c/bb5738957d92c8603a90c9664d34236641c221b2

Related entries

All Kernel, userspace & hypervisor entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.