CVE-2024-27431
Published: May 17, 2024
Modified: May 12, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 9216477449f33cdbc9c9a99d49f500b7fbb81702 - < 5f4e51abfbe6eb444fa91906a5cd083044278297affected 9216477449f33cdbc9c9a99d49f500b7fbb81702 - < f0363af9619c77730764f10360e36c6445c12f7baffected 9216477449f33cdbc9c9a99d49f500b7fbb81702 - < 3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95affected 9216477449f33cdbc9c9a99d49f500b7fbb81702 - < f562e4c4aab00986dde3093c4be919c3f2b85a4aaffected 9216477449f33cdbc9c9a99d49f500b7fbb81702 - < eaa7cb836659ced2d9f814ac32aa3ec193803ed6+1 more versions |
Linux | Linux | affected 5.9unaffected 0 - < 5.9unaffected 5.10.213 - <= 5.10.*unaffected 5.15.152 - <= 5.15.*unaffected 6.1.82 - <= 6.1.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now