Unrated severityNVD Advisory· Published Feb 28, 2024· Updated May 4, 2025

RDMA/siw: Fix a use after free in siw_alloc_mr

CVE-2021-47012

Description

In the Linux kernel, the following vulnerability has been resolved:

Our code analyzer reported a UAF.

In siw_alloc_mr(), it calls siw_mr_add_mem(mr,..). In the implementation of siw_mr_add_mem(), mem is assigned to mr->mem and then mem is freed via kfree(mem) if xa_alloc_cyclic() failed. Here, mr->mem still point to a freed object. After, the execution continue up to the err_out branch of siw_alloc_mr, and the freed mr->mem is used in siw_mr_drop_mem(mr).

My patch moves "mr->mem = mem" behind the if (xa_alloc_cyclic(..)<0) {} section, to avoid the uaf.

Affected products

osv-coords67 versions
pkg:rpm/suse/kernel-64kb&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-64kb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-docs&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-livepatch-SLE15-SP2_Update_46&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP2 pkg:rpm/suse/kernel-livepatch-SLE15-SP3_Update_42&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP3 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-preempt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS
< 5.3.18-150300.59.153.2+ 66 more
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.59.153.2.150300.18.90.2
- (no CPE)range: < 5.3.18-150200.24.183.1.150200.9.93.2
- (no CPE)range: < 5.3.18-150300.59.153.2.150300.18.90.2
- (no CPE)range: < 5.3.18-150300.59.153.2.150300.18.90.2
- (no CPE)range: < 5.3.18-150300.59.153.2.150300.18.90.2
- (no CPE)range: < 5.3.18-150200.24.183.1.150200.9.93.2
- (no CPE)range: < 5.3.18-150300.59.153.2.150300.18.90.2
- (no CPE)range: < 5.3.18-150200.24.183.1.150200.9.93.2
- (no CPE)range: < 5.3.18-150300.59.153.2.150300.18.90.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 1-150200.5.3.2
- (no CPE)range: < 1-150300.7.3.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.161.1
- (no CPE)range: < 5.3.18-150300.161.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.2
- (no CPE)range: < 5.3.18-150300.161.1
- (no CPE)range: < 5.3.18-150300.161.1
- (no CPE)range: < 5.3.18-150300.59.153.1
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.1
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.1
- (no CPE)range: < 5.3.18-150200.24.183.1
- (no CPE)range: < 5.3.18-150300.59.153.1
- (no CPE)range: < 5.3.18-150300.59.153.2
Linux/Linuxcpe-rescue
Range: 5.3

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000