{"id":"CVE-2024-27431","revision":"7c92895ad57b41c79b2b37b4f14482c2","records":[{"revision":"7c92895ad57b41c79b2b37b4f14482c2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-27431","aliases":[],"title":"cpumap: Zero-initialise xdp_rxq_info struct before running XDP program","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncpumap: Zero-initialise xdp_rxq_info struct before running XDP program\n\nWhen running an XDP program that is attached to a cpumap entry, we don't\ninitialise the xdp_rxq_info data structure being used in the xdp_buff\nthat backs the XDP program invocation. Tobias noticed that this leads to\nrandom values being returned as the xdp_md->rx_queue_index value for XDP\nprograms running in a cpumap.\n\nThis means we're basically returning the contents of the uninitialised\nmemory, which is bad. Fix this by zero-initialising the rxq data\nstructure before running the XDP program.","state":0,"publishedAt":"2024-05-17T12:02:10.274+00:00","modifiedAt":"2026-10-15T00:40:19.62+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/bpf/cpumap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"9216477449f33cdbc9c9a99d49f500b7fbb81702\",\n                            \"lessThan\": \"5f4e51abfbe6eb444fa91906a5cd083044278297\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9216477449f33cdbc9c9a99d49f500b7fbb81702\",\n                            \"lessThan\": \"f0363af9619c77730764f10360e36c6445c12f7b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9216477449f33cdbc9c9a99d49f500b7fbb81702\",\n                            \"lessThan\": \"3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9216477449f33cdbc9c9a99d49f500b7fbb81702\",\n                            \"lessThan\": \"f562e4c4aab00986dde3093c4be919c3f2b85a4a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9216477449f33cdbc9c9a99d49f500b7fbb81702\",\n                            \"lessThan\": \"eaa7cb836659ced2d9f814ac32aa3ec193803ed6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9216477449f33cdbc9c9a99d49f500b7fbb81702\",\n                            \"lessThan\": \"2487007aa3b9fafbd2cb14068f49791ce1d7ede5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/bpf/cpumap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.9\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.213\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.152\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.82\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.22\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.7.10\",\n                            \"lessThanOrEqual\": \"6.7.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.8\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/5f4e51abfbe6eb444fa91906a5cd083044278297","https://git.kernel.org/stable/c/f0363af9619c77730764f10360e36c6445c12f7b","https://git.kernel.org/stable/c/3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95","https://git.kernel.org/stable/c/f562e4c4aab00986dde3093c4be919c3f2b85a4a","https://git.kernel.org/stable/c/eaa7cb836659ced2d9f814ac32aa3ec193803ed6","https://git.kernel.org/stable/c/2487007aa3b9fafbd2cb14068f49791ce1d7ede5"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-27431","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-27431","identifiers":["CVE-2024-27431"]},"retained":false,"historicalAffected":[]}],"coverage":[]}