CVE Database
/

CVE-2024-27431

Back to search

CVE-2024-27431

Published: May 17, 2024

Modified: May 12, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program.

VendorProductVersions

Linux

Linux

affected
9216477449f33cdbc9c9a99d49f500b7fbb81702 - < 5f4e51abfbe6eb444fa91906a5cd083044278297
affected
9216477449f33cdbc9c9a99d49f500b7fbb81702 - < f0363af9619c77730764f10360e36c6445c12f7b
affected
9216477449f33cdbc9c9a99d49f500b7fbb81702 - < 3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95
affected
9216477449f33cdbc9c9a99d49f500b7fbb81702 - < f562e4c4aab00986dde3093c4be919c3f2b85a4a
affected
9216477449f33cdbc9c9a99d49f500b7fbb81702 - < eaa7cb836659ced2d9f814ac32aa3ec193803ed6

+1 more versions

Linux

Linux

affected
5.9
unaffected
0 - < 5.9
unaffected
5.10.213 - <= 5.10.*
unaffected
5.15.152 - <= 5.15.*
unaffected
6.1.82 - <= 6.1.*

+3 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now