Linux Kernel RDMA/bnxt_re Maximum Scatter-Gather Elements Vulnerability

A vulnerability in the Linux kernel's RDMA/bnxt_re component has been addressed, concerning the maximum number of scatter-gather elements (SGEs) for Work Requests. The P7 version currently supports up to 13 SGEs, but the Work Queue Entry (WQE) software structure can only accommodate 6. This mismatch allows the stack to process requests with up to 13 SGEs, leading to traffic failures and system crashes. The vulnerability arose because the maximum SGE limit was not properly defined for variable-sized WQEs, causing issues for both static and variable WQEs.

Impact

Exploitation of this vulnerability could result in traffic failures and system crashes.