PT-2024-35551 · Linux+11 · Linux Kernel+11
Published
2024-11-19
·
Updated
2026-03-14
·
CVE-2024-53088
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition in the i40e driver leads to MAC/VLAN filters becoming corrupted and leaking. This issue occurs under heavy load when multiple threads are concurrently modifying MAC/VLAN filters by setting mac and port VLAN. The problem arises when one thread allocates a filter and another thread concurrently frees it, causing subsequent corruption when the i40e service task() calls i40e sync vsi filters() and refers to the already freed filter memory. To reproduce the issue, spawn multiple VFs, apply a concurrent heavy load by changing MAC addresses and port VLANs, and observe errors in dmesg. The fix involves implementing a new intermediate filter state, I40E FILTER NEW SYNC, to prevent filters from being deleted directly from the hash list.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Race Condition
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu