CVE-2024-38544

A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem, specifically within the rxe_comp_queue_pkt() function of the rxe component. A race condition can occur where a socket buffer (skb) is prematurely freed while still being referenced, leading to a segmentation fault. This vulnerability can cause a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the rxe kernel module from loading. This can be achieved by creating a modprobe configuration file.

Create a file named /etc/modprobe.d/disable-rxe.conf with the following content:

install rxe /bin/true
blacklist rxe

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect.

dracut -f -v
reboot

Disabling the rxe module will prevent the use of RDMA over Ethernet functionality.