CVE-2024-50095

A flaw was found in the Linux kernel's RDMA/mad agent. A local attacker could exploit a vulnerability in the timeout handler of the MAD agent, where it excessively acquires and releases locks for each timed-out Work Request (WR). This heavy locking contention can lead to a softlockup, effectively causing a Denial of Service (DoS) on the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If RDMA functionality is not required, prevent the ib_mad kernel module from loading to mitigate this vulnerability. To blacklist the module, create a file named /etc/modprobe.d/blacklist-ib_mad.conf with the content blacklist ib_mad. A system reboot is required for this change to take effect. This may impact applications relying on RDMA.