CVE-2021-47616: RDMA: Fix use-after-free in rxe_queue_cleanup

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-06-19 · updated 2026-08-04
Weakness: CWE-416

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxe_queue_cleanup On error handling path in rxe_qp_from_init() qp->sq.queue is freed and then rxe_create_qp() will drop last reference to this object. qp clean up function will try to free this queue one time and it causes UAF bug. Fix it by zeroing queue pointer after freeing queue in rxe_qp_from_init().

Affected products

Linux kernel: from 5.15 before 5.15.10 — fixed in 5.15.10

How to fix

Upgrade to a fixed version: Linux kernel 5.15.10. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-47616 or the next vulnerability affects your stack