PT-2024-6911 · Linux+4 · Linux Kernel+4
Published
2024-08-23
·
Updated
2025-09-29
·
CVE-2024-46766
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.10.0-rc2+
Description
The vulnerability is related to the
netif queue set napi function in the Linux kernel, which can lead to out-of-bounds writes when XDP queues are included. This issue arises because netif queue set napi is called from ice vsi rebuild, which is not rtnl-locked when called from the reset, complicating synchronization with .ndo bpf. The fix involves moving netif queue set napi to rtnl-protected sections and rewriting napi-to-queue assignment to prevent XDP queue inclusion.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix, which moves
netif queue set napi to rtnl-protected sections and rewrites napi-to-queue assignment. As a temporary workaround, consider disabling the ice vsi rebuild function until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Suse
Ubuntu