Riskcovery

CVE-2024-39293

Revert "xsk: Support redirect to any socket bound to the same umem"

State
Published
Severity
9.8 Critical
Published
Jun 25, 2024
Updated
Aug 5, 2026
Reserved
Jun 24, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Revert "xsk: Support redirect to any socket bound to the same umem"

This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db.

This patch introduced a potential kernel crash when multiple napi instances redirect to the same AF_XDP socket. By removing the queue_index check, it is possible for multiple napi instances to access the Rx ring at the same time, which will result in a corrupted ring state which can lead to a crash when flushing the rings in __xsk_flush(). This can happen when the linked list of sockets to flush gets corrupted by concurrent accesses. A quick and small fix is not possible, so let us revert this for now.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2863d665ea41282379f108e4da6c8a2366ba66db to before 19cb40b1064566ea09538289bfcf5bc7ecb9b6f5Affected
  • 2863d665ea41282379f108e4da6c8a2366ba66db to before 7fcf26b315bbb728036da0862de6b335da83dff2Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.9.5 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.