CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any()
In the Linux kernel, the following vulnerability has been resolved:
gve: Clear napi->skb before devkfreeskbany()
gverxfreeskb incorrectly leaves napi->skb referencing an skb after it is freed with devkfreeskbany(). This can result in a subsequent call to napigetfrags returning a dangling pointer.
Fix this by clearing napi->skb before the skb is freed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40937?
CVE-2024-40937 is classified as a medium severity vulnerability.
How do I fix CVE-2024-40937?
To fix CVE-2024-40937, update the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, or later as specified in the patch notes.
Which Linux versions are affected by CVE-2024-40937?
CVE-2024-40937 affects multiple versions of the Linux kernel including 5.10.x and 6.1.x series.
What causes the issue in CVE-2024-40937?
The issue in CVE-2024-40937 is caused by gve_rx_free_skb incorrectly leaving napi->skb referencing an skb after it has been freed.
Is CVE-2024-40937 a common vulnerability?
While CVE-2024-40937 is not widely recognized, it poses a specific risk to Linux kernel operations, particularly in networking.