Linux kernel (drivers/infiniband/hw/irdma): The driver signalled completion of control-plane requests through an

Impact

The driver signalled completion of control-plane requests through an unordered flag, with no memory barriers. A waiter can therefore observe the request as finished and release the request context while the completing side is still writing to it, or miss the wakeup entirely. The kernel CNA rates this as network-reachable with no privileges and full confidentiality, integrity and availability loss.

Who can reach it

Reached through irdma control-plane requests, which are driven by tenant verbs activity (QP/MR/CQ operations from /dev/infiniband/uverbs*) and by connection events arriving from peers on the fabric. Only nodes with Intel E810/E830 irdma are affected.

What to do

No fixed version is listed in the record - take the stable kernel carrying bde37aed0724 (or d9c8c45e6d2f) and reboot. Interim: irdma nodes carrying untrusted tenants should have /dev/infiniband/* removed from those containers until patched.

References