In the Linux kernel, the following vulnerability has been resolved:
ice: xsk: return xsk buffers back to pool when cleaning the ring
Currently we only NULL the xdp_buff pointer in the internal SW ring but we never give it back to the xsk buffer pool. This means that buffers can be leaked out of the buff pool and never be used again.
Add missing xsk_buff_free() call to the routine that is supposed to clean the entries that are left in the ring so that these buffers in the umem can be used by other sockets.
Also, only go through the space that is actually left to be cleaned instead of a whole ring.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jun 26, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Mar 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 4, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade dtb-armUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade dtb-exynos | Aug 9, 2024 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub