In the Linux kernel, the following vulnerability has been resolved:
ice: xsk: return xsk buffers back to pool when cleaning the ring
Currently we only NULL the xdp_buff pointer in the internal SW ring but we never give it back to the xsk buffer pool. This means that buffers can be leaked out of the buff pool and never be used again.
Add missing xsk_buff_free() call to the routine that is supposed to clean the entries that are left in the ring so that these buffers in the umem can be used by other sockets.
Also, only go through the space that is actually left to be cleaned instead of a whole ring.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jun 26, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | Mar 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 4, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade dtb-renesasUpgrade kernel-develUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-rt-extra | Aug 9, 2024 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub