Vulnerability Details CVE-2024-35834
In the Linux kernel, the following vulnerability has been resolved:
xsk: recycle buffer in case Rx queue was full
Add missing xsk_buff_free() call when __xsk_rcv_zc() failed to produce
descriptor to XSK Rx queue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 33.1%
CVSS Severity
CVSS v3 Score 8.2
References
- https://git.kernel.org/stable/c/269009893146c495f41e9572dd9319e787c2eba9
- https://git.kernel.org/stable/c/7b4d93d31aade99210d41cd9d4cbd2957c98bc8c
- https://git.kernel.org/stable/c/cce713664548284daf977739e7ff1cd59e84189c
- https://git.kernel.org/stable/c/269009893146c495f41e9572dd9319e787c2eba9
- https://git.kernel.org/stable/c/7b4d93d31aade99210d41cd9d4cbd2957c98bc8c
- https://git.kernel.org/stable/c/cce713664548284daf977739e7ff1cd59e84189c
Products affected by CVE-2024-35834
-
cpe:2.3:o:linux:linux_kernel:6.6
-
cpe:2.3:o:linux:linux_kernel:6.6.1
-
cpe:2.3:o:linux:linux_kernel:6.6.10
-
cpe:2.3:o:linux:linux_kernel:6.6.11
-
cpe:2.3:o:linux:linux_kernel:6.6.12
-
cpe:2.3:o:linux:linux_kernel:6.6.13
-
cpe:2.3:o:linux:linux_kernel:6.6.14
-
cpe:2.3:o:linux:linux_kernel:6.6.2
-
cpe:2.3:o:linux:linux_kernel:6.6.3
-
cpe:2.3:o:linux:linux_kernel:6.6.4
-
cpe:2.3:o:linux:linux_kernel:6.6.5
-
cpe:2.3:o:linux:linux_kernel:6.6.6
-
cpe:2.3:o:linux:linux_kernel:6.6.7
-
cpe:2.3:o:linux:linux_kernel:6.6.8
-
cpe:2.3:o:linux:linux_kernel:6.6.9
-
cpe:2.3:o:linux:linux_kernel:6.7
-
cpe:2.3:o:linux:linux_kernel:6.7.1
-
cpe:2.3:o:linux:linux_kernel:6.7.2
-
cpe:2.3:o:linux:linux_kernel:6.8