CVE-2024-42082: xdp: Remove WARN() from __xdp_reg_mem_model()

Published Jul 29, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

xdp: Remove WARN() from xdpregmemmodel()

syzkaller reports a warning in xdpregmemmodel().

The warning occurs only if memidinithashtable() returns an error. It returns the error in two cases:

1. memory allocation fails; 2. rhashtableinit() fails when some fields of rhashtableparams struct are not initialized properly.

The second case cannot happen since there is a static const rhashtableparams struct with valid fields. So, warning is only triggered when there is a problem with memory allocation.

Thus, there is no sense in using WARN() to handle this error and it can be safely removed.

WARNING: CPU: 0 PID: 5065 at net/core/xdp.c:299 xdpregmemmodel+0x2d9/0x650 net/core/xdp.c:299

CPU: 0 PID: 5065 Comm: syz-executor883 Not tainted 6.8.0-syzkaller-05271-gf99c5f563c17 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:xdpregmemmodel+0x2d9/0x650 net/core/xdp.c:299

Call Trace: xdpregmemmodel+0x22/0x40 net/core/xdp.c:344 xdptestrunsetup net/bpf/testrun.c:188 [inline] bpftestrunxdplive+0x365/0x1e90 net/bpf/testrun.c:377 bpfprogtestrunxdp+0x813/0x11b0 net/bpf/testrun.c:1267 bpfprogtestrun+0x33a/0x3b0 kernel/bpf/syscall.c:4240 sysbpf+0x48d/0x810 kernel/bpf/syscall.c:5649 dosysbpf kernel/bpf/syscall.c:5738 [inline] sesysbpf kernel/bpf/syscall.c:5736 [inline] x64sysbpf+0x7c/0x90 kernel/bpf/syscall.c:5736 dosyscall64+0xfb/0x240 entrySYSCALL64afterhwframe+0x6d/0x75

Found by Linux Verification Center (linuxtesting.org) with syzkaller.

Affected Software

19 affected componentsFixes available
Linux Linux kernel<4.18
Linux Linux kernel>=4.19<5.10.221
Linux Linux kernel>=5.11<5.15.162
Linux Linux kernel>=5.16<6.1.97
Linux Linux kernel>=6.2<6.6.37
Linux Linux kernel>=6.7<6.9.8
redhat/kernel<5.10.221
5.10.221
redhat/kernel<5.15.162
5.15.162
redhat/kernel<6.1.97
6.1.97
redhat/kernel<6.6.37
6.6.37
redhat/kernel<6.9.8
6.9.8
redhat/kernel<6.10
6.10
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
debian/linux-6.1
6.1.129-1~deb11u1
Microsoft azl3 kernel 6.6.35.1-5
Microsoft azl3 kernel 6.6.43.1-7
Microsoft cbl2 kernel 5.15.160.1-1
Microsoft cbl2 kernel 5.15.162.2-1
Microsoft cbl2 kernel 5.15.160.1-1

Event History

Jul 29, 2024
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
Description
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 8, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Updated
via Microsoft·07:00 AM
Description
May 5, 2025
Data Sourced
via Ubuntu·12:33 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-42082?

The severity of CVE-2024-42082 is considered moderate due to the warning generated in the Linux kernel when certain conditions are met.

2

How do I fix CVE-2024-42082?

To fix CVE-2024-42082, upgrade your Linux kernel to one of the patched versions including 5.10.221, 5.15.162, 6.1.97, 6.6.37, or later.

3

Which Linux kernel versions are affected by CVE-2024-42082?

CVE-2024-42082 affects Linux kernel versions from 4.18 up to but not including 5.10.221, 5.11 to 5.15.162, 5.16 to 6.1.97, and 6.2 to 6.6.37.

4

Is CVE-2024-42082 limited to any specific Linux distributions?

CVE-2024-42082 is reported on both Red Hat and Debian-based distributions with specific kernel versions affected.

5

What is the impact of CVE-2024-42082 on system performance?

The impact of CVE-2024-42082 is limited to the generation of warnings in the log, which may not affect overall system performance significantly.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203