summaryrefslogtreecommitdiffstats
path: root/retired/CVE-2014-2739
blob: e36a9df9b57ad53370fb21d41bd0748ff058886a (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Description: IB/core: Don't resolve passive side RoCE L2 address in CMA REQ handler
References:
Notes:
 From oss-sec:
 Linux kernel built with the InfiniBand communication link(CONFIG_INFINIBAND)
 along with the support for Remote Direct Memory Access(RDMA) over Convered
 Ethernet(RoCE), is vulnerable to a crash caused by invalid memory access.
 It occurs while trying to resolve RoCE L2 address on the server side.
 A remote unprivileged user/program could use this flaw to crash the kernel,
 resulting in DoS.
Bugs:
upstream: released (3.14-rc4) [b2853fd6c2d0f383dbdf7427e263eb576a633867]
2.6.32-upstream-stable: N/A "Introduced in 3.14-rc1 with dd5f03beb4f76ae65d76d8c22a8815e424fc607c"
sid: N/A "Introduced in 3.14-rc1 with dd5f03beb4f76ae65d76d8c22a8815e424fc607c"
3.2-wheezy-security: N/A "Introduced in 3.14-rc1 with dd5f03beb4f76ae65d76d8c22a8815e424fc607c"
2.6.32-squeeze-security: N/A "Introduced in 3.14-rc1 with dd5f03beb4f76ae65d76d8c22a8815e424fc607c"
3.2-upstream-stable: N/A "Introduced in 3.14-rc1 with dd5f03beb4f76ae65d76d8c22a8815e424fc607c"

© 2014-2024 Faster IT GmbH | imprint | privacy policy