CVE-2024-57933

gve: guard XSK operations on the existence of queues

Medium · published January 21, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gve: guard XSK operations on the existence of queues

This patch predicates the enabling and disabling of XSK pools on the

existence of queues. As it stands, if the interface is down, disabling

or enabling XSK pools would result in a crash, as the RX queue pointer

would be NULL. XSK pool registration will occur as part of the next

interface up.

Similarly, xsk_wakeup needs be guarded against queues disappearing

while the function is executing, so a check against the

GVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the

disabling of the bit and the synchronize_net() in gve_turndown.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.3th percentile
Published
2025-01-21T12:01Z
EPSS history
Timeline
  • 21 JAN 12:01Z
    gve: guard XSK operations on the existence of queues
    cvelistv5