Christopher Bednarz 410c05b60c RDMA/irdma: Prevent zero-length STAG registration ...

commit bb6d73d9ad upstream.

Currently irdma allows zero-length STAGs to be programmed in HW during
the kernel mode fast register flow. Zero-length MR or STAG registration
disable HW memory length checks.

Improve gaps in bounds checking in irdma by preventing zero-length STAG or
MR registrations except if the IB_PD_UNSAFE_GLOBAL_RKEY is set.

This addresses the disclosure CVE-2023-25775.

Fixes: b48c24c2d7 ("RDMA/irdma: Implement device supported verb APIs")
Signed-off-by: Christopher Bednarz <christopher.n.bednarz@intel.com>
Signed-off-by: Shiraz Saleem <shiraz.saleem@intel.com>
Link: https://lore.kernel.org/r/20230818144838.1758-1-shiraz.saleem@intel.com
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-12-20 15:17:43 +01:00

..

core

RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz

2023-12-13 18:36:40 +01:00

hw

RDMA/irdma: Prevent zero-length STAG registration

2023-12-20 15:17:43 +01:00

sw

RDMA/siw: Fix connection failure handling

2023-10-10 21:59:09 +02:00

ulp

RDMA/rtrs-clt: Remove the warnings for req in_use check

2023-12-13 18:36:39 +01:00

Kconfig

…

Makefile

…