CVE-2024-53088

Summary

CVE-2024-53088 is a vulnerability in the Linux kernel i40e driver that exposes MAC/VLAN filters to corruption and leakage under heavy load. This occurs due to a race condition where Thread T0 allocates a filter while Thread T1 concurrently frees it, causing i40e_service_task() to access already freed filter memory. Reproduction steps include spawning multiple Virtual Functions (VFs), applying concurrent heavy load by changing MAC addresses and port VLANs, and observing errors in dmesg. The fix for this issue involves implementing a new intermediate filter state, I40E_FILTER_NEW_SYNC, for filters on the tmp_add_list. These filters cannot be deleted directly and must be removed using the full process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.