{"timestamp":"2024-06-25T20:47:03.644056Z","id":"CVE-2024-39293","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/xdp/xsk.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2863d665ea41282379f108e4da6c8a2366ba66db","lessThan":"19cb40b1064566ea09538289bfcf5bc7ecb9b6f5","versionType":"git","status":"affected"},{"version":"2863d665ea41282379f108e4da6c8a2366ba66db","lessThan":"7fcf26b315bbb728036da0862de6b335da83dff2","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/xdp/xsk.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.9","status":"affected"},{"version":"0","lessThan":"6.9","versionType":"semver","status":"unaffected"},{"version":"6.9.5","lessThanOrEqual":"6.9.*","versionType":"semver","status":"unaffected"},{"version":"6.10","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-362

OR
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.9 up to (excluding) 6.9.5
          *cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*

CVE: https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 Types: Patch

CVE: https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 Types: Patch

kernel.org: https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 Types: Patch

kernel.org: https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 Types: Patch

https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5

https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2

In the Linux kernel, the following vulnerability has been resolved:

Revert "xsk: Support redirect to any socket bound to the same umem"

This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db.

This patch introduced a potential kernel crash when multiple napi instances
redirect to the same AF_XDP socket. By removing the queue_index check, it is
possible for multiple napi instances to access the Rx ring at the same time,
which will result in a corrupted ring state which can lead to a crash when
flushing the rings in __xsk_flush(). This can happen when the linked list of
sockets to flush gets corrupted by concurrent accesses. A quick and small fix
is not possible, so let us revert this for now.

kernel.org https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 [No types assigned]

kernel.org https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 [No types assigned]