CVE-2024-50208

A flaw was found in the Linux kernel's RDMA/bnxt_re module. This vulnerability arises from incorrect handling of Level-2 Page Buffer List (PBL) pages when the number of pages exceeds 256K for non-Memory Region (MR) resources. The system mistakenly assumes multiple page addresses for a single Page Directory Entry (PDE) address, leading to invalid memory access. This memory corruption can cause a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If RDMA over Converged Ethernet (RoCE) functionality is not required, the bnxt_re kernel module can be prevented from loading by blacklisting it. To blacklist the bnxt_re module:

1. Create a file named blacklist-bnxt_re.conf in /etc/modprobe.d/ with the following content:

   blacklist bnxt_re
   install bnxt_re /bin/true
   

2. Regenerate the initramfs:
   • For RHEL 8 and 9: dracut -f -v
   • For RHEL 7: dracut -f
3. Reboot the system for the changes to take effect. This mitigation may impact network performance or functionality if RoCE is actively used.