CVE-2024-35834

MEDIUM

Linux Kernel 6.6-6.6.14, 6.7-6.7.2, 6.8 - Use-After-Free in XSK Rx Queue Buffer Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: xsk: recycle buffer in case Rx queue was full Add missing xsk_buff_free() call when __xsk_rcv_zc() failed to produce descriptor to XSK Rx queue.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/cce713664548284daf977739e7ff1cd59e84189c

Patch

https://git.kernel.org/stable/c/7b4d93d31aade99210d41cd9d4cbd2957c98bc8c

Patch

https://git.kernel.org/stable/c/269009893146c495f41e9572dd9319e787c2eba9

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 11.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-401

Status published

Products (12)

linux/Kernel 6.6.0 - 6.6.15linux

linux/Kernel 6.7.0 - 6.7.3linux

Linux/Linux < 6.6

Linux/Linux 24ea50127ecf0efe819c1f6230add27abc6ca9d9 - 269009893146c495f41e9572dd9319e787c2eba9

Linux/Linux 24ea50127ecf0efe819c1f6230add27abc6ca9d9 - 7b4d93d31aade99210d41cd9d4cbd2957c98bc8c

Linux/Linux 24ea50127ecf0efe819c1f6230add27abc6ca9d9 - cce713664548284daf977739e7ff1cd59e84189c

Linux/Linux 6.6

Linux/Linux 6.6.15 - 6.6.*

Linux/Linux 6.7.3 - 6.7.*

Linux/Linux 6.8

... and 2 more

Published May 17, 2024

Tracked Since Feb 18, 2026