Riskcovery

CVE-2024-57933

gve: guard XSK operations on the existence of queues

State
Published
Severity
5.5 Medium
Published
Jan 21, 2025
Updated
May 11, 2026
Reserved
Jan 19, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gve: guard XSK operations on the existence of queues

This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result in a crash, as the RX queue pointer would be NULL. XSK pool registration will occur as part of the next interface up.

Similarly, xsk_wakeup needs be guarded against queues disappearing while the function is executing, so a check against the GVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the disabling of the bit and the synchronize_net() in gve_turndown.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • fd8e40321a12391e6f554cc637d0c4b6109682a9 to before 771d66f2bd8c4dba1286a9163ab982cecd825718Affected
  • fd8e40321a12391e6f554cc637d0c4b6109682a9 to before 8e8d7037c89437af12725f454e2eaf40e8166c0fAffected
  • fd8e40321a12391e6f554cc637d0c4b6109682a9 to before 40338d7987d810fcaa95c500b1068a52b08eec9bAffected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.70 through 6.6.*Not affected
  • 6.12.9 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.