What happened
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() Sashiko points out that the user can specify WQs sharing the same CQ as a part of the uAPI and this will trigger the WARN_ON() then go on to corrupt the kernel. Just reject it outright and fail the QP creation.
Affected versions
Linux: c15d7802a42402a87880a17eee89ff023e49ecc0 through before 9cc0c6b1ba8cd5c55aef043e1384de0a8b4efa71 (git); c15d7802a42402a87880a17eee89ff023e49ecc0 through before 9ef65af26b2a6738bf15812042e84b3112402d3a (git); c15d7802a42402a87880a17eee89ff023e49ecc0 through before db991ba50087ad99fa12a2c483aa3be19671ea73 (git); c15d7802a42402a87880a17eee89ff023e49ecc0 through before 159f2efabc89d3f931d38f2d35876535d4abf0a3 (git); 6.8 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.