In the Linux kernel, the following vulnerability has been resolved:
ice: xsk: return xsk buffers back to pool when cleaning the ring
Currently we only NULL the xdp_buff pointer in the internal SW ring but we never give it back to the xsk buffer pool. This means that buffers can be leaked out of the buff pool and never be used again.
Add missing xsk_buff_free() call to the routine that is supposed to clean the entries that are left in the ring so that these buffers in the umem can be used by other sockets.
Also, only go through the space that is actually left to be cleaned instead of a whole ring.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jun 26, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Mar 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 4, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-amazon | Aug 9, 2024 | Mar 4, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub