CVE-2024-35834CWE-401

CVE-2024-35834

High · published May 17, 2024

CVSS v3.1
8.2
EPSS
0%
Percentile
34.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xsk: recycle buffer in case Rx queue was full

Add missing xsk_buff_free() call when __xsk_rcv_zc() failed to produce

descriptor to XSK Rx queue.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.3th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2024-05-17T18:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.6, < 6.6.156.6.15
linux/linux_kernel≥ 6.7, < 6.7.36.7.3
linux/linux_kernelall versions—
References (6)
https://git.kernel.org/stable/c/269009893146c495f41e9572dd9319e787c2eba9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7b4d93d31aade99210d41cd9d4cbd2957c98bc8c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cce713664548284daf977739e7ff1cd59e84189c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/269009893146c495f41e9572dd9319e787c2eba9 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7b4d93d31aade99210d41cd9d4cbd2957c98bc8c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/cce713664548284daf977739e7ff1cd59e84189c · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 17 MAY 14:02Z
    xsk: recycle buffer in case Rx queue was full
    cvelistv5