Linux Kernel BPF CPU Map Kthread Management Vulnerability

A vulnerability in the Linux kernel's BPF CPU map implementation can lead to a warning about a kthread being stopped prematurely. This issue arises when the XDP program queues frames into a pointer ring, but the corresponding kthread has not been properly initiated. As a result, the pointer ring is not cleared, triggering a warning. This vulnerability affects Linux kernel versions through 6.5.0-rc2.

Impact

The vulnerability can cause a warning to be issued, indicating a potential issue with how kthreads are managed in relation to CPU maps and XDP program execution.

Reproduction

The vulnerability can be reproduced by running the XDP program with stress-mode enabled, while some real-time threads are active. This combination will trigger the warning about the kthread management issue.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.