CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's RDMA/uverbs subsystem, specifically impacting the mthca, irdma, and siw drivers, which improperly handle UHW data associated with the reg_mr method. If exploited, a malicious userspace application could cause a NULL pointer dereference, potentially leading to a crash of the affected drivers. Organizations utilizing these RDMA drivers should prioritize this issue to mitigate the risk of denial-of-service attacks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR The original commit missed that three drivers (mthca, irdma, siw) have UHW data associated with reg_mr that cannot be passed through the ioctl. They also assume that the udata cannot be NULL, so failing to pass a valid udata can trigger a NULL udata crash in those drivers. This never happens in real systems since in rdma-core ibv_cmd_reg_mr_ex() does not accept a udata and those three drivers don't use it, however a malicious userspace could trigger it.