xsk: require at least 16 bytes of TX metadata
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.104, 6.18.45, 7.1.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata AF_XDP accepts a TX metadata length as small as eight bytes, but every supported request needs the flags plus at least one eight-byte request field. Such short metadata also lets the kernel read beyond the registered area. Require 16 bytes rather than sizeof(struct xsk_tx_metadata) to preserve compatibility with applications that do not use launch-time metadata.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
From 341ac980eab90ac1f6c22ee9f9da83ed9604d899 · fixed in 21b8536aee819792f1b4b38b9aacf2a073025d49; From 341ac980eab90ac1f6c22ee9f9da83ed9604d899 · fixed in 642c6e73fce17fdca93a5793c4d22359fda866d7; From 341ac980eab90ac1f6c22ee9f9da83ed9604d899 · fixed in cfb9d2976b277e554e28c165e3eff4b4a8ea10bd; From 341ac980eab90ac1f6c22ee9f9da83ed9604d899 · fixed in 1bb30b181d9f0484e141f8411e15ed906d5c6780
- Linux Linux
6.8
- KernelLinux
From 6.8.0 · fixed in 6.12.104; From 6.13.0 · fixed in 6.18.45; From 6.19.0 · fixed in 7.1.9