In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
RDMA\/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()<\/p>\n
When __rdma_counter_bind_qp() fails in alloc_and_bind(), the error path
\njumps to err_mode which frees the counter without decrementing
\nport_counter->num_counters. The only place that decrements is
\nrdma_counter_free(), which is unreachable since the counter was never
\nsuccessfully bound.<\/p>\n
This leak accumulates across repeated failures, permanently preventing
\nthe port from switching to AUTO mode (-EBUSY in __counter_set_mode())
\nand blocking the MANUAL\u2192NONE auto-revert in rdma_counter_free(). When
\nthe mode was NONE before the call, the MANUAL mode set by
\n__counter_set_mode() also leaks since the revert logic is never
\nreached.<\/p>\n
Add an err_bind label between the num_counters increment and the
\nexisting err_mode label. It decrements num_counters and mirrors the
\nMANUAL\u2192NONE revert from rdma_counter_free(), ensuring the port state
\nis fully restored on bind failure.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
RDMA\/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()<\/p>\n
When __rdma_counter_bind_qp() fails in alloc_and_bind()<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28709","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28709","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28709"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28709"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28709"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}