CVE-2024-42071 — Excessive Iteration in Linux
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 99.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 29
Description
In the Linux kernel, the following vulnerability has been resolved:
ionic: use dev_consume_skb_any outside of napi
If we're not in a NAPI softirq context, we need to be careful
about how we call napi_consume_skb(), specifically we need to
call it with budget==0 to signal to it that we're not in a
safe context.
This was found while running some configuration stress testing
of traffic and a change queue config loop running, and this
curious note popped out:
[ 4371.402645] BUG: using smp_proces…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages12 packages
▶CVEListV5linux/linux386e69865311044b576ff536c99c6ee9cc98a228 — ef7646ed49fff962e97b276f4ab91327a67eeb5a+2
Patches
🔴Vulnerability Details
2OSV▶
CVE-2024-42071: In the Linux kernel, the following vulnerability has been resolved: ionic: use dev_consume_skb_any outside of napi If we're not in a NAPI softirq cont↗2024-07-29
GHSA▶
GHSA-rxwh-225r-76q6: In the Linux kernel, the following vulnerability has been resolved:
ionic: use dev_consume_skb_any outside of napi
If we're not in a NAPI softirq co↗2024-07-29