CVE-2024-35834

In the Linux kernel, the following vulnerability has been resolved:

xsk: recycle buffer in case Rx queue was full

The Linux kernel CVE team has assigned CVE-2024-35834 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051730-CVE-2024-35834-2378@gregkh/T

This vulnerability is rated with a Low impact because exploitation is constrained to configurations leveraging AF_XDP zero-copy networking, which requires privileged administrative capabilities to configure and bind sockets. In standard deployments, unprivileged local users cannot initiate or interact with these high-performance socket interfaces. Consequently, the flaw primarily results in localized packet buffer starvation under heavy receive load rather than broader system instability or unauthorized privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.