In the Linux kernel, the following vulnerability has been resolved:
ice: xsk: return xsk buffers back to pool when cleaning the ring
Currently we only NULL the xdp_buff pointer in the internal SW ring but we never give it back to the xsk buffer pool. This means that buffers can be leaked out of the buff pool and never be used again.
Add missing xsk_buff_free() call to the routine that is supposed to clean the entries that are left in the ring so that these buffers in the umem can be used by other sockets.
Also, only go through the space that is actually left to be cleaned instead of a whole ring.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Jun 26, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Oct 8, 2024 | Mar 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 4, 2024 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-devel | Aug 9, 2024 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub