InfiniBand subnet manager (OpenSM / UFM): The IB subnet manager has unilateral authority over LID assignment, routing

NCVD-0000-004-infiniband-subnet-manager-opensmFirmware, BMC & network fabriccurated

Impact

The IB subnet manager has unilateral authority over LID assignment, routing and partitioning for the entire fabric, and the management datagram (MAD) path has historically had weak authentication. There is no per-tenant trust boundary in the SM

Who can reach it

Fabric-local

What to do

Requires an architectural control: pinned partition keys (pkeys) per tenant, SM redundancy, and treating the SM host as tier-0 infrastructure. No patch exists because it is the protocol model

References

https://nvd.nist.gov/vuln/detail/CVE-2024-0130

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.