In the Linux kernel, the following vulnerability has been resolved:
cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap.
This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Sep 16, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.82-99.168Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-libbpf | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade dtb-qcomUpgrade dtb-appleUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dtb-renesas | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotg | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub