Executive Summary

This vulnerability exists in the Linux kernel's RDMA core, specifically in the function ib_get_ucaps(). The issue arises because the code relied solely on the device identifier (dev_t) to validate character/block devices. However, since character and block devices can share the same dev_t, an attacker could exploit this by finding a block device with the same dev_t and masquerade as a character device file descriptor (ucap cdev fd). The fix involves validating the file operations (f_ops) to ensure only authentic character devices are accepted.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an attacker to impersonate a character device by exploiting the shared device identifier with a block device. This masquerading could lead to unauthorized access or manipulation of device capabilities, potentially compromising system security or stability.

Useful 0 Not Useful 0