PT-2024-35684 · Linux+3 · Linux Kernel+3
Michal Schmidt
·
Published
2024-11-15
·
Updated
2025-05-26
·
CVE-2024-53236
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises when a new skb is allocated for transmitting an xsk descriptor, but the descriptor is later found to have invalid options set for the TX metadata. As a result, the new skb is never freed, leading to a potential leak of skbs until the send buffer is full, which can make sending more packets impossible. The problem is resolved by freeing the skb in the error path if it is the first frag, i.e., an skb allocated in the current iteration of
xsk build skb().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Suse
Ubuntu