CVE-2024-38544: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-38544 affects the Linux kernel's RDMA/rxe component. The vulnerability was discovered in June 2024 and involves a segmentation fault in the rxe_comp_queue_pkt function. The issue affects Linux kernel systems that use the RDMA/rxe (Remote Direct Memory Access/RDMA over Ethernet) subsystem (NVD).

The vulnerability occurs in the rxe_comp_queue_pkt() function where an incoming response packet skb is enqueued to the resp_pkts queue. The function makes a decision whether to run the completer task inline or schedule it, and then dereferences the skb to bump a 'hw' performance counter. The issue arises because if the completer task is already running in a separate thread, it may have already processed and freed the skb, which can cause a segmentation fault. This has been observed infrequently during high-scale testing. The CVSS v3.1 base score is 6.3 (Medium) with vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H (Kernel Git).

When exploited, this vulnerability can cause a segmentation fault in the Linux kernel's RDMA/rxe subsystem, potentially leading to system crashes or denial of service conditions. The vulnerability has been particularly observed during high-scale testing scenarios (NVD).

The vulnerability requires local access and high complexity to exploit. An attacker needs low privileges but no user interaction to exploit this vulnerability. The issue has been observed in testing environments at high scale (CISA-ADP).

The vulnerability has been patched by changing the order of operations in the rxe_comp_queue_pkt function, ensuring the counter is accessed before enqueuing the packet. The fix has been incorporated into various Linux kernel versions and distributions. Red Hat has released security updates for RHEL 9 to address this vulnerability (Red Hat).