Linux Kernel RDMA/nldev Counter Underflow Vulnerability

Vulnerability

A vulnerability in the Linux kernel's RDMA/nldev component allows for an underflow condition in the function nldev_stat_set_counter_dynamic_doit(). The issue arises because the code checks the 'index' variable for an upper bound but fails to validate negative values. This oversight can lead to unintended behavior, as negative indices are not properly handled. The vulnerability has been addressed by changing the index variable's type to unsigned, eliminating the risk of underflow.

Impact

Exploitation of this vulnerability could lead to an underflow condition, potentially causing unexpected behavior in the affected component.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.