Vulnerability feed

Executive summary

The advisory describes a flaw in the Linux kernel's gve driver, which is the network driver for Google virtual NICs. When XSK pools are disabled, the driver can deadlock on a lock it already holds, so the affected system can hang in that path. The advisory does not state a severity rating, and the fix is a kernel patch that changes the driver to use the locked NAPI disable and enable calls.

Technical summary

The flaw is a deadlock, a locking bug, in the gve_xsk_pool_disable path of the Linux kernel gve driver. The driver called the unlocked versions of napi_disable and napi_enable even though the netdev lock was already held because gve supports queue management ops, so the thread tried to re-acquire a lock it already held. The advisory says the issue was found in production. The fix replaces the calls with napi_disable_locked and napi_enable_locked, in commit 0cb6939a4dfefa822007b7a71986e06bc4f61f54, and the fixed kernel version is not stated in the advisory. The advisory does not state the CVSS score, attack vector or required privileges, workarounds, or detection guidance.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/0cb6939a4dfefa8…b7a71986e06bc4f61f54

Score

No CVSS score published.

Affects

LinuxGoogleLinuxLinux kernelGoogle gve

Executive summary

A flaw in the Linux kernel's gve network driver, which is used with Google Virtual NIC hardware, causes buffers used for AF_XDP zero-copy to leak when receive rings are stopped. The advisory does not state a severity score or describe an attack, but it says the issue was hit in production. The fix is a kernel patch that frees these buffers when rings are stopped, and the advisory presents it as a stable tree commit.

Technical summary

This is a resource leak (buffer leak) in the gve driver's DQO receive path for AF_XDP zero-copy buffers. When ring state is reset during queue stop, XSK buffers posted to the NIC were not freed, so they leaked. The fix frees XSK buffers attached to an allocated buf_state in gve_rx_reset_ring_dqo and clears the pointer. The commit is tagged Fixes c1fffc5d66a7 and Cc stable. The advisory does not state affected or fixed kernel version numbers, a CVSS score, attack vector or required privileges, workarounds, or detection guidance.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/506f9de069d07a7…7ce3edd2fdf32f4953aa

Score

No CVSS score published.

Affects

LinuxGoogleLinuxLinux kernelGoogle gve

Executive summary

The advisory concerns a resource leak in the Linux kernel's gve network driver, which is used with Google virtual network hardware. The leak affects AF_XDP zero-copy receive buffers when a receive completion descriptor reports an error. The advisory does not state a severity rating, and the fix is a kernel patch that the stable tree has already incorporated.

Technical summary

This is a buffer leak (resource management flaw) in the gve driver's DQO RX datapath for AF_XDP zero-copy. When the rx_error bit is set in the RX completion descriptor, the driver freed the buf_state but did not free the attached XSK buffer, so the XSK buffer leaked. The fix, shown in the diff, checks whether buf_state->xsk_buff is set and, if so, calls xsk_buff_free() and gve_free_buf_state() instead of gve_free_buffer(). The advisory references the commit that introduced the bug as c1fffc5d66a7 and the fixing commit 06656aaa7e43ae62b673c2244d27099b8b94a70d, and says the fix is tagged for stable. Affected and fixed kernel version ranges, attack vector and preconditions, workarounds, and exploitation status are not stated.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/06656aaa7e43ae6…c2244d27099b8b94a70d

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affects

LinuxGoogleLinuxLinux kernelGoogle gve