CVE-2024-53209

Summary

[CVE-2024-53209]: A vulnerability in the Linux kernel's bnxt_en driver has been resolved. The issue arises when the Maximum Transmission Unit (MTU) setting is changed after an XDP multi-buffer is attached, resulting in out-of-sync aggregation ring settings. This can lead to random memory corruption and crashes when the hardware DMAs data larger than the allocated buffer size. To mitigate this issue, the call to bnxt_set_rx_skb_mode() is now made within bnxt_change_mtu(), ensuring proper configuration and update of the AGG rings and rx_skb_func based on the new MTU value. Additionally, BNXT_FLAG_NO_AGG_RINGS is cleared at the beginning of bnxt_set_rx_skb_mode() to ensure proper setting or clearing based on the current MTU.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.