Riskcovery

CVE-2021-47001

xprtrdma: Fix cwnd update ordering

State
Published
Severity
7.5 High
Published
Feb 28, 2024
Updated
Aug 5, 2026
Reserved
Feb 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xprtrdma: Fix cwnd update ordering

After a reconnect, the reply handler is opening the cwnd (and thus enabling more RPC Calls to be sent) /before/ rpcrdma_post_recvs() can post enough Receive WRs to receive their replies. This causes an RNR and the new connection is lost immediately.

The race is most clearly exposed when KASAN and disconnect injection are enabled. This slows down rpcrdma_rep_create() enough to allow the send side to post a bunch of RPC Calls before the Receive completion handler can invoke ib_post_recv().

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to before eddae8be7944096419c2ae29477a45f767d0fcd4Affected
  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to before 8834ecb5df22b7ff3c9b0deba7726579bb613f95Affected
  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to before 19b5fa9489b5706bc878c3a522a7f771079e2fa0Affected
  • 2ae50ad68cd79224198b525f7bd645c9da98b6ff to before 35d8b10a25884050bb3b0149b62c3818ec59f77cAffected
  • 3791c5982ba1eebf2900ee7ca7b9a89619c26d54Affected
  • 5.4.13 to before 5.5Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.38 through 5.10.*Not affected
  • 5.11.22 through 5.11.*Not affected
  • 5.12.5 through 5.12.*Not affected
  • 5.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.