CVE-2024-42082CWE-770denial-of-service

CVE-2024-42082

Medium · published July 29, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xdp: Remove WARN() from __xdp_reg_mem_model()

syzkaller reports a warning in __xdp_reg_mem_model().

The warning occurs only if __mem_id_init_hash_table() returns an error. It

returns the error in two cases:

1. memory allocation fails;

2. rhashtable_init() fails when some fields of rhashtable_params

struct are not initialized properly.

The second case cannot happen since there is a static const rhashtable_params

struct with valid fields. So, warning is only triggered when there is a

problem with memory allocation.

Thus, there is no sense in using WARN() to handle this error and it can be

safely removed.

WARNING: CPU: 0 PID: 5065 at net/core/xdp.c:299 __xdp_reg_mem_model+0x2d9/0x650 net/core/xdp.c:299

CPU: 0 PID: 5065 Comm: syz-executor883 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024

RIP: 0010:__xdp_reg_mem_model+0x2d9/0x650 net/core/xdp.c:299

Call Trace:

xdp_reg_mem_model+0x22/0x40 net/core/xdp.c:344

xdp_test_run_setup net/bpf/test_run.c:188 [inline]

bpf_test_run_xdp_live+0x365/0x1e90 net/bpf/test_run.c:377

bpf_prog_test_run_xdp+0x813/0x11b0 net/bpf/test_run.c:1267

bpf_prog_test_run+0x33a/0x3b0 kernel/bpf/syscall.c:4240

__sys_bpf+0x48d/0x810 kernel/bpf/syscall.c:5649

__do_sys_bpf kernel/bpf/syscall.c:5738 [inline]

__se_sys_bpf kernel/bpf/syscall.c:5736 [inline]

__x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5736

do_syscall_64+0xfb/0x240

entry_SYSCALL_64_after_hwframe+0x6d/0x75

Found by Linux Verification Center (linuxtesting.org) with syzkaller.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.4th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-07-29T20:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel< 4.184.18
linux/linux_kernel≥ 4.19, < 5.10.2215.10.221
linux/linux_kernel≥ 5.11, < 5.15.1625.15.162
linux/linux_kernel≥ 5.16, < 6.1.976.1.97
linux/linux_kernel≥ 6.2, < 6.6.376.6.37
linux/linux_kernel≥ 6.7, < 6.9.86.9.8
References (16)
https://git.kernel.org/stable/c/7e9f79428372c6eab92271390851be34ab26bfb4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f92298b0467fd77edc4c1a2c3e48833e69840ec4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1095b8efbb13a6a5fa583ed373ee1ccab29da2d0 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/14e51ea78b4ccacb7acb1346b9241bb790a2054c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/1d3e3b3aa2cbe9bc7db9a7f8673a9fa6d2990d54 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4e0c539ee265d5c6e7fa7d229cd4aa7bc01816e2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7e9f79428372c6eab92271390851be34ab26bfb4 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f92298b0467fd77edc4c1a2c3e48833e69840ec4 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-355557.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-613116.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://git.kernel.org/stable/c/1095b8efbb13a6a5fa583ed373ee1ccab29da2d0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/14e51ea78b4ccacb7acb1346b9241bb790a2054c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1d3e3b3aa2cbe9bc7db9a7f8673a9fa6d2990d54 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4e0c539ee265d5c6e7fa7d229cd4aa7bc01816e2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 29 JUL 15:52Z
    xdp: Remove WARN() from __xdp_reg_mem_model()
    cvelistv5