Linux Kernel ibmvfc Driver Resource Management Vulnerability Leading to Memory Issues and List Corruption

A vulnerability in the Linux kernel's ibmvfc SCSI driver has been addressed, concerning the management of queue resources. Currently, resources are allocated and freed for each CRQ connection event, such as resets and live partition migrations. This approach creates several problems: it inefficiently reallocates memory that could be reused after sanitization, risks allocation failures under memory pressure, and introduces a race condition where command processing can interfere with an event pool being deleted. The vulnerability can lead to list corruption, as demonstrated by a kernel exception trace.

Impact

The vulnerability can cause memory management inefficiencies, allocation failures under memory pressure, and list corruption due to race conditions in the event pool management.