CVE-2024-27431
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9216477449f33cdbc9c9a99d49f500b7fbb81702 | affected | git | 5f4e51abfbe6eb444fa91906a5cd083044278297 | Unavailable | None listed |
| 9216477449f33cdbc9c9a99d49f500b7fbb81702 | affected | git | f0363af9619c77730764f10360e36c6445c12f7b | Unavailable | None listed |
| 9216477449f33cdbc9c9a99d49f500b7fbb81702 | affected | git | 3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95 | Unavailable | None listed |
| 9216477449f33cdbc9c9a99d49f500b7fbb81702 | affected | git | f562e4c4aab00986dde3093c4be919c3f2b85a4a | Unavailable | None listed |
| 9216477449f33cdbc9c9a99d49f500b7fbb81702 | affected | git | eaa7cb836659ced2d9f814ac32aa3ec193803ed6 | Unavailable | None listed |
| 9216477449f33cdbc9c9a99d49f500b7fbb81702 | affected | git | 2487007aa3b9fafbd2cb14068f49791ce1d7ede5 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.9 | Unavailable | None listed |
| 5.10.213 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.152 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.82 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.22 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.7.10 | unaffected | semver | Unavailable | 6.7.* | None listed |
| 6.8 | unaffected | original_commit_for_fix | Unavailable | * | None listed |