CVE-2024-39293CWE-362

CVE-2024-39293

Critical · published June 25, 2024

CVSS v3.1
9.8
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Revert "xsk: Support redirect to any socket bound to the same umem"

This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db.

This patch introduced a potential kernel crash when multiple napi instances

redirect to the same AF_XDP socket. By removing the queue_index check, it is

possible for multiple napi instances to access the Rx ring at the same time,

which will result in a corrupted ring state which can lead to a crash when

flushing the rings in __xsk_flush(). This can happen when the linked list of

sockets to flush gets corrupted by concurrent accesses. A quick and small fix

is not possible, so let us revert this for now.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00314 · 23.1th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-06-25T19:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.9, < 6.9.56.9.5
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 25 JUN 14:22Z
    Revert "xsk: Support redirect to any socket bound to the same umem"
    cvelistv5