Security tracker / CVE-2024-56614

CVE-2024-56614

xsk: fix OOB map writes when deleting elements

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in fbfc504a24f5 ("bpf: introduce new bpf AF_XDP map type
 carnil> BPF_MAP_TYPE_XSKMAP"). Vulnerable versions: 4.18-rc1.

Bugs

Status

Branch	Status
upstream	released (6.13-rc2) [32cd3db7de97c0c7a018756ce66244342fd583f0]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	released (6.12.5) [d486b5741d987d3e0e6be4ac22cafdf94e6d1a47]
6.6-upstream-stable	released (6.6.66) [f8abd03f83d5fe81e76eb93e2c4373eb9f75fd8a]
6.1-upstream-stable	released (6.1.120) [ed08c93d5a9801cc8f224a046411fd603c538d07]
5.10-upstream-stable	needed
sid	released (6.12.5-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.123-1)
5.10-bullseye-security	needed