PT-2024-21531 · Linux+7 · Linux Kernel+7
Florian Kauer
·
Published
2024-04-17
·
Updated
2026-05-26
·
CVE-2024-26853
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The vulnerability is related to the igc driver in the Linux kernel, specifically with the XDP REDIRECT feature. When a frame cannot be transmitted due to a full queue, it is necessary to free it by calling xdp return frame rx napi. However, this is the responsibility of the caller of the ndo xdp xmit, and calling it inside igc xdp xmit will lead to memory corruption. The memory corruption can be reproduced with a script that generates more traffic than a i225 NIC can transmit and pushes it via XDP REDIRECT from a virtual interface to the physical interface where frames get dropped.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Memory Corruption
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse