Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-57933

gve: guard XSK operations on the existence of queues

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existence of queues This patch predicates the enabling and disabling of XSK pools on the existence of queues. As it stands, if the interface is down, disabling or enabling XSK pools would result in a crash, as the RX queue pointer would be NULL. XSK pool registration will occur as part of the next interface up. Similarly, xsk_wakeup needs be guarded against queues disappearing while the function is executing, so a check against the GVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the disabling of the bit and the synchronize_net() in gve_turndown.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fd8e40321a12391e6f554cc637d0c4b6109682a9 to < 771d66f2bd8c4dba1286a9163ab982cecd825718affected
  • fd8e40321a12391e6f554cc637d0c4b6109682a9 to < 8e8d7037c89437af12725f454e2eaf40e8166c0faffected
  • fd8e40321a12391e6f554cc637d0c4b6109682a9 to < 40338d7987d810fcaa95c500b1068a52b08eec9baffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.70 to ≤ 6.6.*unaffected
  • 6.12.9 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References