CVE-2021-47001

Summary

CVE-2021-47001 is a vulnerability affecting the Linux kernel's xprtrdma component. This issue arises from a race condition where, after a network reconnection, the reply handler opens the congestion window (cwnd) and enables more RPC calls before rpcrdma_post_recvs() can post enough Receive WRs to receive their replies. This results in an RNR and the immediate loss of the new connection. The vulnerability is more easily exploited when KASAN and disconnect injection are enabled, slowing down rpcrdma_rep_create() and allowing the send side to post a significant number of RPC calls before the Receive completion handler invokes ib_post_recv().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.