Linux Kernel XSK Integer Overflow Vulnerability in XDP Buffer Management

An integer overflow vulnerability has been identified in the Linux kernel's XSK (eXpress Data Path) implementation, specifically within the 'xp_create_and_assign_umem()' function. This vulnerability arises because the 'i' and 'pool->chunk_size' variables are both of type 'u32', allowing their product to wrap around and be incorrectly cast to 'u64'. As a result, it is possible for two different XDP buffers to reference the same memory area, potentially leading to memory corruption or other unintended behavior.

Impact

Exploitation of this vulnerability could result in two XDP buffers pointing to the same memory area, which may lead to memory corruption.