In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AFXDP generic RX path Move rxlock from xsksocket to xskbuffpool. Fix synchronization for shared umem mode in generic RX path where multiple sockets share single xskbuffpool. RX queue is exclusive to xsksocket, while FILL queue can be shared between multiple sockets. This could result in race condition where two CPU cores access RX path of two different sockets sharing the same umem. Protect both queues by acquiring spinlock in shared xskbuffpool. Lock contention may be minimized in the future by some per-thread FQ buffering. It's safe and necessary to move spinlockbh(rxlock) after xskrcvcheck(): * xs->pool and spinlockinit is synchronized by xskbind() -> xskisbound() memory barriers. * xskrcvcheck() may return true at the moment of xskrelease() or xskunbinddev(), however this will not cause any data races or race conditions. xskunbinddev() removes xdp socket from all maps and waits for completion of all outstanding rx operations. Packets in RX path will either complete safely or drop.
{ "binaries": [ { "binary_name": "linux-aws-6.14-cloud-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-aws-6.14-headers-6.14.0-1009", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-aws-6.14-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-buildinfo-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-buildinfo-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-cloud-tools-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-cloud-tools-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-headers-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-headers-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws-64k-dbgsym", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws-dbgsym", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-extra-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-extra-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-tools-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-tools-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9~24.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-buildinfo-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-gcp-6.14-headers-6.14.0-1011", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-gcp-6.14-tools-6.14.0-1011", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-headers-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-headers-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k-dbgsym", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-dbgsym", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-lib-rust-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-modules-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-modules-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-tools-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11~24.04.1" }, { "binary_name": "linux-tools-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11~24.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-headers-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-image-unsigned-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-image-unsigned-6.14.0-1007-oem-dbgsym", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-ipu6-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-ipu7-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-usbio-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-modules-vision-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-oem-6.14-headers-6.14.0-1007", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-oem-6.14-tools-6.14.0-1007", "binary_version": "6.14.0-1007.7" }, { "binary_name": "linux-tools-6.14.0-1007-oem", "binary_version": "6.14.0-1007.7" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-buildinfo-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-headers-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-headers-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle-64k-dbgsym", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle-dbgsym", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-extra-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-modules-extra-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-oracle-6.14-headers-6.14.0-1009", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-oracle-6.14-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-tools-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9~24.04.1" }, { "binary_name": "linux-tools-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9~24.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-riscv-6.14-headers-6.14.0-24", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-riscv-6.14-tools-6.14.0-24", "binary_version": "6.14.0-24.24.1~24.04.1" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1~24.04.1" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "bpftool", "binary_version": "7.6.0+6.14.0-24.24" }, { "binary_name": "linux-bpf-dev", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-buildinfo-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-cloud-tools-common", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-doc", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-headers-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-64k-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-image-unsigned-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-lib-rust-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-libc-dev", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-extra-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-ipu6-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-ipu7-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-usbio-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-modules-vision-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-perf", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-source-6.14.0", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-6.14.0-24-generic-64k", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-common", "binary_version": "6.14.0-24.24" }, { "binary_name": "linux-tools-host", "binary_version": "6.14.0-24.24" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-aws-cloud-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-aws-headers-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-aws-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-buildinfo-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-buildinfo-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-cloud-tools-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-cloud-tools-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-headers-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-headers-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws-64k-dbgsym", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-aws-dbgsym", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-extra-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-extra-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-tools-6.14.0-1009-aws", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-tools-6.14.0-1009-aws-64k", "binary_version": "6.14.0-1009.9" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-buildinfo-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-gcp-headers-6.14.0-1011", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-gcp-tools-6.14.0-1011", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-headers-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-headers-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-64k-dbgsym", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-image-unsigned-6.14.0-1011-gcp-dbgsym", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-modules-extra-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-tools-6.14.0-1011-gcp", "binary_version": "6.14.0-1011.11" }, { "binary_name": "linux-tools-6.14.0-1011-gcp-64k", "binary_version": "6.14.0-1011.11" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-buildinfo-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-headers-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-headers-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle-64k-dbgsym", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-unsigned-6.14.0-1009-oracle-dbgsym", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-extra-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-extra-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-oracle-headers-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-oracle-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-tools-6.14.0-1009-oracle", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-tools-6.14.0-1009-oracle-64k", "binary_version": "6.14.0-1009.9" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-headers-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-image-6.14.0-1009-raspi-dbgsym", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-modules-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-raspi-headers-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-raspi-tools-6.14.0-1009", "binary_version": "6.14.0-1009.9" }, { "binary_name": "linux-tools-6.14.0-1009-raspi", "binary_version": "6.14.0-1009.9" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-cloud-tools-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-headers-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-image-unsigned-6.14.0-1006-realtime-dbgsym", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-extra-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-modules-iwlwifi-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-cloud-tools-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-headers-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-realtime-tools-6.14.0-1006", "binary_version": "6.14.0-1006.6" }, { "binary_name": "linux-tools-6.14.0-1006-realtime", "binary_version": "6.14.0-1006.6" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "linux-buildinfo-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-headers-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-image-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-image-6.14.0-24-generic-dbgsym", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-modules-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-riscv-headers-6.14.0-24", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-riscv-tools-6.14.0-24", "binary_version": "6.14.0-24.24.1" }, { "binary_name": "linux-tools-6.14.0-24-generic", "binary_version": "6.14.0-24.24.1" } ], "availability": "No subscription required" }