CVE-2024-42083

Summary

CVE-2024-42083 is a vulnerability in the Linux kernel that affects multi-buffer handling in the ionic driver. Specifically, the ionic_run_xdp() function fails to properly unmap and reset page pointers for all pages in a scatter-gather (SG) packet when performing XDP_TX or XDP_REDIRECT actions. Consequently, SG pages are unexpectedly reused, leading to a kernel panic. The issue is indicated by a general protection fault with the error address 0x504f4e4dbebc64ff. The vulnerability was discovered during the 6.10.0-rc3+ kernel version and can be found in the xdp_return_frame function.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.