Vulnerability of the rxe_qp_init_req() function in the drivers/infiniband/sw/rxe/rxe_qp.c module – The Linux kernel’s InfiniBand driver, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 23 Jun 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Vulnerability in rxe_qp_init_req risks memory reclamation flaw exposing protected information.

Reporter	Title	Published	Views	Family All 99
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2-2021-1685 (ALAS-2021-1685)	16 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-004 (ALASKERNEL-5.4-2022-004)	2 May 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2024-1570)	9 May 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : kernel (EulerOS-SA-2024-1592)	9 May 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-1937)	16 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : kernel (EulerOS-SA-2024-1964)	16 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.0 : kernel (EulerOS-SA-2024-1984)	18 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2024-2002)	18 Jul 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2024-2038)	22 Jul 202400:00	–	nessus

Source	Link
lore	www.lore.kernel.org/linux-cve-announce/2024030142-CVE-2021-47078-71f9@gregkh/T/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
git	www.git.kernel.org/stable/c/c65391dd9f0a47617e96e38bd27e277cbe1c40b0
git	www.git.kernel.org/stable/c/6a8086a42dfbf548a42bf2ae4faa291645c72c66
git	www.git.kernel.org/stable/c/f3783c415bf6d2ead3d7aa2c38802bbe10723646
git	www.git.kernel.org/stable/c/a62225d951d77eb20208fed8fc199e0c9b1df08b
git	www.git.kernel.org/stable/c/2ee4d79c364914989c80de382c0b1a7259a7e4b3
git	www.git.kernel.org/stable/c/03344e843ab6dd3b3f2cadfb65ed910590856c70
git	www.git.kernel.org/stable/c/67f29896fdc83298eed5a6576ff8f9873f709228
git	www.git.kernel.org/linus/67f29896fdc83298eed5a6576ff8f9873f709228

23 Jun 2025 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 35.3

EPSS0.00015

rxe_qp_init_req infiniband driver memory reclamation protected information security vulnerability