CVE-2024-39293
A flaw in the Linux kernel's AF_XDP networking code could allow multiple network‑processing instances to corrupt the receive ring of a shared socket, leading to a kernel crash. The problem was introduced by a commit that removed a safety check, and it has been fixed by reverting that commit. Systems running affected kernel versions should apply the revert or upgrade to a kernel that includes it.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users, particularly those using AF_XDP sockets with multiple NAPI instances.
Real-world impact
An attacker could trigger a denial‑of‑service by causing the kernel to crash when flushing rings.
Why this severity
CVSS v3.1 base score 9.8 (Critical) due to network‑adjacent, low‑complexity attack with no privileges or user interaction required, impacting confidentiality, integrity, and availability.
What to do about it
- 01Obtain the patch that reverts commit 2863d665ea41282379f108e4da6c8a2366ba66db (the "Revert \"xsk: Support redirect to any socket bound to the same umem\"" change).
- 02Apply the patch to the kernel source tree.
- 03Recompile the kernel with the patch applied.
- 04Install the rebuilt kernel and reboot the system.
NVD-referenced vendor advisory (Linux kernel revert)
Timeline
- Jun 25, 2024 · Jun 25, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.