CVE Database›Document archive›CVE-2024-47693

CVE-2024-47693

kernel: IB/core: Fix ib_cache_setup_one error flow cleanup

Loading…

Severity

Moderate

Red Hat Product Security

6.5

CVSS 3.1

Review impact separately from score.

Published · October 21, 2024

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's InfiniBand (IB) core. Improper error handling during the setup of the InfiniBand cache can lead to a lack of proper resource cleanup. This issue could allow a local attacker to trigger a kernel warning, resulting in a Denial of Service (DoS) on the affected system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

If InfiniBand functionality is not required, the ib_core kernel module can be prevented from loading to mitigate this vulnerability. To blacklist the ib_core module, create a file named /etc/modprobe.d/blacklist-ib_core.conf with the following content: blacklist ib_core. After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This action may impact system functionality that relies on InfiniBand.

CVSS / CWE

CVSS 3.1 · 6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-459 · Incomplete Cleanup