CVE-2024-39293: Revert "xsk: Support redirect to any socket bound to the same umem"
In the Linux kernel, the following vulnerability has been resolved:
Revert "xsk: Support redirect to any socket bound to the same umem"
This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db.
This patch introduced a potential kernel crash when multiple napi instances redirect to the same AFXDP socket. By removing the queueindex check, it is possible for multiple napi instances to access the Rx ring at the same time, which will result in a corrupted ring state which can lead to a crash when flushing the rings in xskflush(). This can happen when the linked list of sockets to flush gets corrupted by concurrent accesses. A quick and small fix is not possible, so let us revert this for now.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 2863d665ea41282379f108e4da6c8a2366ba66db
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39293?
CVE-2024-39293 is classified as a potential kernel crash vulnerability in the Linux kernel.
How does CVE-2024-39293 affect the Linux kernel?
CVE-2024-39293 affects the Linux kernel by introducing instability when multiple NAPI instances attempt to redirect to the same socket.
How do I fix CVE-2024-39293?
To fix CVE-2024-39293, ensure you revert the affected commit or update your Linux kernel to a version that includes this patch.
Which versions of the Linux kernel are affected by CVE-2024-39293?
CVE-2024-39293 affects specific versions of the Linux kernel where the mentioned commit was included.
What should I do if my system is vulnerable to CVE-2024-39293?
If your system is vulnerable to CVE-2024-39293, apply the latest security patches from your Linux distribution immediately.