Linux Kernel Zero-Copy XDP_TX Action Crash Vulnerability in STMMAC Driver

A crash vulnerability has been identified in the Linux kernel's STMMAC network driver when using zero-copy XDP_TX actions. This issue arises because the driver fails to properly handle the memory type of XDP buffers, leading to invalid memory mappings and kernel crashes. The vulnerability is present in the Linux kernel stable tree.

Impact

Exploitation of this vulnerability causes a kernel panic, disrupting system operations and potentially leading to a denial of service.

Reproduction

To reproduce this vulnerability, enable zero-copy XDP_TX actions on a network interface using the STMMAC driver. Monitor the system for kernel paging request errors and Oops messages in the crash log, indicating a kernel panic has occurred.

Remediation

Users can apply the available patch in the Linux kernel stable tree to address this vulnerability.