Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's GVE driver related to the management of eXtra Socket (XSK) pools has been addressed. The issue arose because the enabling and disabling of XSK pools did not account for the existence of receive (RX) queues. If an interface was down, this oversight could lead to a crash, as the RX queue pointer would be NULL. The vulnerability has been resolved by ensuring that XSK pool registration occurs only when the interface is active. Additionally, the xsk_wakeup function has been modified to check for the availability of queues, preventing potential crashes when queues are removed while the function is running.
The vulnerability could cause a system crash by attempting to access a NULL pointer when an interface is down.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.