diff options
| author | Christopher Bednarz <christopher.n.bednarz@intel.com> | 2023-08-18 17:48:38 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2023-09-13 10:42:56 +0300 |
| commit | f01cfec8d3456bf389918eb898eda11f46d8b1b7 (patch) | |
| tree | ab44adc4f378c1fe5e3f6dee78a9ebc04e192c23 /drivers/infiniband/hw/irdma/cm.h | |
| parent | 5fa1552877ce2b692781672a5f53bb76b8bd49f8 (diff) | |
| download | linux-f01cfec8d3456bf389918eb898eda11f46d8b1b7.tar.xz | |
RDMA/irdma: Prevent zero-length STAG registration
[ Upstream commit bb6d73d9add68ad270888db327514384dfa44958 ]
Currently irdma allows zero-length STAGs to be programmed in HW during
the kernel mode fast register flow. Zero-length MR or STAG registration
disable HW memory length checks.
Improve gaps in bounds checking in irdma by preventing zero-length STAG or
MR registrations except if the IB_PD_UNSAFE_GLOBAL_RKEY is set.
This addresses the disclosure CVE-2023-25775.
Fixes: b48c24c2d710 ("RDMA/irdma: Implement device supported verb APIs")
Signed-off-by: Christopher Bednarz <christopher.n.bednarz@intel.com>
Signed-off-by: Shiraz Saleem <shiraz.saleem@intel.com>
Link: https://lore.kernel.org/r/20230818144838.1758-1-shiraz.saleem@intel.com
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'drivers/infiniband/hw/irdma/cm.h')
0 files changed, 0 insertions, 0 deletions