Linux Kernel RDMA/hfi1 Use-After-Free Vulnerability in Memory Management

A use-after-free vulnerability has been identified in the Linux kernel's RDMA/hfi1 component. This issue arises under certain conditions, such as during an MPI_Abort, when the hfi1 cleanup process may prematurely release the last reference to a task's memory management structure. As a result, a new task could allocate the memory structure while it is still in use, leading to various problems. One consequence is the corruption of the memory management semaphore counter, causing a deadlock during write operations. Additionally, this vulnerability can corrupt a memory management structure that another task is actively using.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, causing memory corruption. This can disrupt the normal operation of the kernel, potentially leading to a deadlock situation or other unpredictable behavior.