CVE-2024-47693
kernel: IB/core: Fix ib_cache_setup_one error flow cleanup
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2024
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's InfiniBand (IB) core. Improper error handling during the setup of the InfiniBand cache can lead to a lack of proper resource cleanup. This issue could allow a local attacker to trigger a kernel warning, resulting in a Denial of Service (DoS) on the affected system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
If InfiniBand functionality is not required, the ib_core kernel module can be prevented from loading to mitigate this vulnerability. To blacklist the ib_core module, create a file named /etc/modprobe.d/blacklist-ib_core.conf with the following content: blacklist ib_core. After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This action may impact system functionality that relies on InfiniBand.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-459 · Incomplete Cleanup