In the Linux kernel, the following vulnerability has been resolved:
net: ena: Fix incorrect descriptor free behavior
ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDP_REDIRECT or XDP_TX instructions
The ena_free_tx_bufs() cycles through all descriptors in a TX queue and unmaps + frees every descriptor that hasn't been acknowledged yet by the device (uncompleted TX transactions). The function assumes that the processed TX queue is necessarily from the first category listed above and ends up using napi_consume_skb() for descriptors belonging to an XDP specific queue.
This patch solves a bug in which, in case of a VF reset, the descriptors aren't freed correctly, leading to crashes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-rt-debug-kvmUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade rvUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-core | Jul 3, 2024 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 27, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade libperf-debuginfoUpgrade python3-perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade perf-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade rvUpgrade rtla | Jul 16, 2024 | May 20, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-apm | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1149-azureUpgrade linux-image-oracleUpgrade linux-image-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.4.0-214-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.4.0-1147-gcp-fipsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1131-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.4.0-1149-azure-fipsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1118-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1144-awsUpgrade linux-image-5.4.0-1049-iotUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1144-aws-fipsUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-generic | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub