CVE-2024-53236
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/12/2024
Last modified:
08/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xsk: Free skb when TX metadata options are invalid<br />
<br />
When a new skb is allocated for transmitting an xsk descriptor, i.e., for<br />
every non-multibuf descriptor or the first frag of a multibuf descriptor,<br />
but the descriptor is later found to have invalid options set for the TX<br />
metadata, the new skb is never freed. This can leak skbs until the send<br />
buffer is full which makes sending more packets impossible.<br />
<br />
Fix this by freeing the skb in the error path if we are currently dealing<br />
with the first frag, i.e., an skb allocated in this iteration of<br />
xsk_build_skb.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.8 (including) | 6.11.11 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12 (including) | 6.12.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page