CVE-2024-39293

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-39293
In the Linux kernel, the following vulnerability has been resolved: Revert "xsk: Support redirect to any socket bound to the same umem" This reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db. This patch introduced a potential kernel crash when multiple napi instances redirect to the same AF_XDP socket. By removing the queue_index check, it is possible for multiple napi instances to access the Rx ring at the same time, which will result in a corrupted ring state which can lead to a crash when flushing the rings in __xsk_flush(). This can happen when the linked list of sockets to flush gets corrupted by concurrent accesses. A quick and small fix is not possible, so let us revert this for now.

4.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 Patch
https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 Patch
https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 Patch
https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
History

17 Sep 2025, 16:05

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 - () https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 - Patch
References () https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 - () https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 - Patch
CWE CWE-362
CPE cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.7

21 Nov 2024, 09:27

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 - () https://git.kernel.org/stable/c/19cb40b1064566ea09538289bfcf5bc7ecb9b6f5 -
References () https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 - () https://git.kernel.org/stable/c/7fcf26b315bbb728036da0862de6b335da83dff2 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: Revertir "xsk: admite redirección a cualquier socket vinculado al mismo umem". Esto revierte el commit 2863d665ea41282379f108e4da6c8a2366ba66db. Este parche introdujo un posible fallo del kernel cuando varias instancias de napi se redirigen al mismo socket AF_XDP. Al eliminar la verificación queue_index, es posible que varias instancias de napi accedan al anillo Rx al mismo tiempo, lo que resultará en un estado de anillo corrupto que puede provocar un bloqueo al vaciar los anillos en __xsk_flush(). Esto puede suceder cuando la lista vinculada de sockets para vaciar se corrompe por accesos simultáneos. No es posible una solución rápida y pequeña, así que revirtamos esto por ahora.

25 Jun 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-25 15:15

Updated : 2025-09-17 16:05

NVD link : CVE-2024-39293

Mitre link : CVE-2024-39293

CVE.ORG link : CVE-2024-39293

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')