CVE-2024-40992

A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) rxe driver. This vulnerability allows an attacker to cause a Denial of Service (DoS) by sending Unreliable Datagram (UD) request packets that exceed the receive buffer size. Due to incorrect packet length handling, the affected Queue Pair (QP) transitions into an error state rather than silently discarding the malformed packet, disrupting ongoing communication.

This vulnerability is rated as Low severity because the Soft-RoCE (rdma_rxe) driver is not enabled or configured by default on Red Hat Enterprise Linux systems. Exploitation is constrained to environments actively utilizing software-based RDMA over Converged Ethernet with Unreliable Datagram queue pairs. Additionally, oversized packets only cause the targeted queue pair to enter an error state rather than inducing a kernel panic or compromising system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.