In the Linux kernel, the following vulnerability has been resolved:
net: ena: Fix incorrect descriptor free behavior
ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDP_REDIRECT or XDP_TX instructions
The ena_free_tx_bufs() cycles through all descriptors in a TX queue and unmaps + frees every descriptor that hasn't been acknowledged yet by the device (uncompleted TX transactions). The function assumes that the processed TX queue is necessarily from the first category listed above and ends up using napi_consume_skb() for descriptors belonging to an XDP specific queue.
This patch solves a bug in which, in case of a VF reset, the descriptors aren't freed correctly, leading to crashes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-64k-debug-develUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-debug-develUpgrade kernelUpgrade rtlaUpgrade kernel-64k-debug-coreUpgrade kernel-modules | Jul 3, 2024 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 27, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade rvUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-cross-headersUpgrade libperf-debuginfoUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-modules-extra | Jul 16, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade kernel-macros | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1131-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-214-lowlatencyUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-5.4.0-1147-gcp-fipsUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1144-aws-fipsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1149-azureUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.4.0-214-genericUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1147-gcpUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1142-oracleUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1118-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1103-bluefieldUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.4.0-214-generic-lpaeUpgrade linux-image-5.4.0-1062-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-1144-awsUpgrade linux-image-genericUpgrade linux-image-5.4.0-1049-iotUpgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1149-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-oracle | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub