Description
In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9216477449f33cdbc9c9a99d49f500b7fbb81702 to < 5f4e51abfbe6eb444fa91906a5cd083044278297affected9216477449f33cdbc9c9a99d49f500b7fbb81702 to < f0363af9619c77730764f10360e36c6445c12f7baffected9216477449f33cdbc9c9a99d49f500b7fbb81702 to < 3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95affected9216477449f33cdbc9c9a99d49f500b7fbb81702 to < f562e4c4aab00986dde3093c4be919c3f2b85a4aaffected9216477449f33cdbc9c9a99d49f500b7fbb81702 to < eaa7cb836659ced2d9f814ac32aa3ec193803ed6affected9216477449f33cdbc9c9a99d49f500b7fbb81702 to < 2487007aa3b9fafbd2cb14068f49791ce1d7ede5affected
Linux Linux
Default version status: affected
5.9affected0 to < 5.9unaffected5.10.213 to ≤ 5.10.*unaffected5.15.152 to ≤ 5.15.*unaffected6.1.82 to ≤ 6.1.*unaffected6.6.22 to ≤ 6.6.*unaffected6.7.10 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5f4e51abfbe6eb444fa91906a5cd083044278297 ↗
- https://git.kernel.org/stable/c/f0363af9619c77730764f10360e36c6445c12f7b ↗
- https://git.kernel.org/stable/c/3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95 ↗
- https://git.kernel.org/stable/c/f562e4c4aab00986dde3093c4be919c3f2b85a4a ↗
- https://git.kernel.org/stable/c/eaa7cb836659ced2d9f814ac32aa3ec193803ed6 ↗
- https://git.kernel.org/stable/c/2487007aa3b9fafbd2cb14068f49791ce1d7ede5 ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗