Linux RDS Bug Lets an RDMA Peer Overrun Kernel Path Storage

Linux RDS can accept a path count that is larger than the storage allocated for an InfiniBand connection. A peer on the same Remote Direct Memory Access, or RDMA, fabric can then make receive-side kernel code walk beyond that allocation, producing an out-of-bounds write and a system crash.LinuxSecurity – Security ArticlesRead More