In the Linux kernel, the following vulnerability has been resolved:
ice: Fix DMA mappings leak
Fix leak, when user changes ring parameters. During reallocation of RX buffers, new DMA mappings are created for those buffers. New buffers with different RX ring count should substitute older ones, but those buffers were freed in ice_vsi_cfg_rxq and reallocated again with ice_alloc_rx_buf. kfree on rx_buf caused leak of already mapped DMA. Reallocate ZC with xdp_buf struct, when BPF program loads. Reallocate back to rx_buf, when BPF program unloads. If BPF program is loaded/unloaded and XSK pools are created, reallocate RX queues accordingly in XDP_SETUP_XSK_POOL handler.
Steps for reproduction: while : do for ((i=0; i<=8160; i=i+32)) do ethtool -G enp130s0f0 rx $i tx $i sleep 0.5 ethtool -g enp130s0f0 done done
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 3, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-armUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-syms-rt | Aug 9, 2024 | May 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub