CVE-2024-42083

A kernel panic flaw was found in the linux kernel. ionic_run_xdp() doesn't handle multi-buffer packets properly for XDP_TX and XDP_REDIRECT. When a jumbo frame is received, the ionic_run_xdp() first makes xdp frame with all necessary pages in the rx descriptor. If the action is either XDP_TX or XDP_REDIRECT, it should unmap dma-mapping and reset page pointer to NULL for all pages, not only the first page, but it doesn't for SG pages. Due to this error, SG pages will unexpectedly be reused, causing a kernel panic.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires specific network hardware, jumbo frame configurations, and an active XDP setup performing packet redirection or transmission. The issue only affects environments utilizing Pensando Ionic Ethernet adapters where multi-buffer XDP programs are explicitly deployed. An unhandled buffer state during packet redirection can trigger a system crash, leading to a denial of service without compromising host confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.