In the Linux kernel, the following vulnerability has been resolved:
net: ena: Fix incorrect descriptor free behavior
ENA has two types of TX queues: - queues which only process TX packets arriving from the network stack - queues which only process TX packets forwarded to it by XDP_REDIRECT or XDP_TX instructions
The ena_free_tx_bufs() cycles through all descriptors in a TX queue and unmaps + frees every descriptor that hasn't been acknowledged yet by the device (uncompleted TX transactions). The function assumes that the processed TX queue is necessarily from the first category listed above and ends up using napi_consume_skb() for descriptors belonging to an XDP specific queue.
This patch solves a bug in which, in case of a VF reset, the descriptors aren't freed correctly, leading to crashes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matchedUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-headersUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade rtlaUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade kernel-64k-develUpgrade kernel-rtUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-debug | Jul 3, 2024 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 27, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debug-modules-core | Jul 16, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-rt-devel | Jun 24, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-5.4.0-1062-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-214-generic-lpaeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.4.0-214-genericUpgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-gcp-fipsUpgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1142-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.4.0-1103-bluefieldUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1149-azure-fipsUpgrade linux-image-5.4.0-1118-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1147-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1144-aws-fipsUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-214-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1149-azureUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1049-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1144-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1131-kvmUpgrade linux-image-oemUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.4.0-1147-gcp-fipsUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-1048-gkeop | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub