PT-2024-35684 · Linux+3 · Linux Kernel+3

Michal Schmidt

·

Published

2024-11-15

·

Updated

2025-05-26

·

CVE-2024-53236

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises when a new skb is allocated for transmitting an xsk descriptor, but the descriptor is later found to have invalid options set for the TX metadata. As a result, the new skb is never freed, leading to a potential leak of skbs until the send buffer is full, which can make sending more packets impossible. The problem is resolved by freeing the skb in the error path if it is the first frag, i.e., an skb allocated in the current iteration of xsk build skb().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-04529
CVE-2024-53236
OPENSUSE-SU-2025_0428-1
OPENSUSE-SU-2025_0499-1
OPENSUSE-SU-2025_0557-1
SUSE-SU-2025:0289-1
SUSE-SU-2025:0428-1
SUSE-SU-2025:0499-1
SUSE-SU-2025:0557-1
SUSE-SU-2025:20165-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20248-1
SUSE-SU-2025:20249-1
SUSE-SU-2025_0428-1
SUSE-SU-2025_0499-1
SUSE-SU-2025_0557-1
USN-7276-1
USN-7277-1
USN-7310-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Linuxmint
Linux Kernel
Suse
Ubuntu