In the Linux kernel, the following vulnerability has been resolved:
net: ena: Fix incorrect descriptor free behavior
ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDP_REDIRECT or XDP_TX instructions
The ena_free_tx_bufs() cycles through all descriptors in a TX queue and unmaps + frees every descriptor that hasn't been acknowledged yet by the device (uncompleted TX transactions). The function assumes that the processed TX queue is necessarily from the first category listed above and ends up using napi_consume_skb() for descriptors belonging to an XDP specific queue.
This patch solves a bug in which, in case of a VF reset, the descriptors aren't freed correctly, leading to crashes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade rvUpgrade kernel-64k-debug-develUpgrade kernel-64k-coreUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade rtlaUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debugUpgrade kernel-rt-debug-devel | Jul 3, 2024 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 27, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade libperf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel-matchedUpgrade kernel-devel | Jul 16, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rt | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-azure-fipsUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-1062-xilinx-zynqmpUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-214-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-214-genericUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.4.0-1149-azure-fipsUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1103-bluefieldUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1118-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.4.0-1142-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1144-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1149-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1049-iotUpgrade linux-image-genericUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1131-kvmUpgrade linux-image-5.4.0-214-lowlatencyUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.4.0-1144-aws-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1147-gcp-fipsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-ibm-classic | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub