CVE-2024-39293

published 2024-06-25

CVE-2024-39293: In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound to the same umem" This reverts commit…

Priority P4 16 medium 4.7 CVSS 3.1

AV L AC H PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

Revert "xsk: Support redirect to any socket bound to the same umem"

This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db.

This patch introduced a potential kernel crash when multiple napi instances
redirect to the same AF_XDP socket. By removing the queue_index check, it is
possible for multiple napi instances to access the Rx ring at the same time,
which will result in a corrupted ring state which can lead to a crash when
flushing the rings in __xsk_flush(). This can happen when the linked list of
sockets to flush gets corrupted by concurrent accesses. A quick and small fix
is not possible, so let us revert this for now.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.9.7-1 (forky)	linux 6.9.7-1 (forky)
linux	linux	—	—
linux	linux	>= 2863d665ea41282379f108e4da6c8a2366ba66db < 19cb40b1064566ea09538289bfcf5bc7ecb9b6f5	19cb40b1064566ea09538289bfcf5bc7ecb9b6f5
linux	linux	>= 2863d665ea41282379f108e4da6c8a2366ba66db < 7fcf26b315bbb728036da0862de6b335da83dff2	7fcf26b315bbb728036da0862de6b335da83dff2
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.9.7-1	6.9.7-1
linux	linux_kernel	>= 0 < 6.9.7-1	6.9.7-1
linux	linux_kernel	>= 6.9 < 6.9.5	6.9.5

CVSS provenance

nvd v3.1 4.7 MEDIUM CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 4.7 MEDIUM

vendor_debian 4.7 LOW

vendor_redhat 4.7 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-362 CWE-99