CVE-2024-50094 sfc: Don't invoke xdp_do_flush() from netpoll.
A null pointer dereference in the sfc network driver causes a kernel crash when netpoll invokes XDP flush with zero budget.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50094?
CVE-2024-50094 is a high-severity vulnerability in Linux kernel, published on 5 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
sfc: Don't invoke xdp_do_flush() from netpoll.
Yury reported a crash in the sfc driver originated from netpoll_send_udp(). The netconsole sends a message and then netpoll invokes the driver's NAPI function with a budget of zero. It is dedicated to allow driver to free TX resources, that it may have used while sending the packet.
In the netpoll case the driver invokes xdp_do_flush() unconditionally, leading to crash because bpf_net_context was never assigned.
Invoke xdp_do_flush() only if budget is not zero.
Which versions are affected by CVE-2024-50094?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50094?
Apply the vendor's patch.
Is CVE-2024-50094 being exploited?
There is no known exploitation of CVE-2024-50094 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-50094, DEBIAN-CVE-2024-50094, GHSA-m4xx-f75v-xfq3, UBUNTU-CVE-2024-50094.