CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's RDMA/siw component, specifically in the siw_create_qp() function, where the queue pair (QP) is published before its initialization is complete. This flaw could allow unauthorized access to partially constructed QPs, potentially leading to race conditions or data corruption. Organizations using Linux systems with RDMA capabilities should prioritize addressing this issue to mitigate risks associated with improper QP handling.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently calls siw_qp_add() before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being constructed. Move siw_qp_add() to the end of siw_create_qp(), after QP initialization and before adding the QP to the siw device list.