CVE-2024-57932

What it actually does

Missing guard in GVE XDP xmit NDO allows callback when num_xdp_queues=0 (no XDP program) or TX pointer is NULL (interface down), causing divide-by-zero or NULL dereference; also lacks synchronization on open-to-close transitions via NAPI bit and synchronize_net.

Why it matters to the business

Linux systems using the GVE driver with XDP may experience kernel crashes or instability during network operations when XDP is unloaded or the interface transitions state, leading to denial of service; low exploit likelihood and no known campaigns reduce urgency but still requires patching of affected kernels.

How an attack unfolds

An attacker with local access or ability to control XDP program installation and interface state triggers the xmit callback without valid queues, hitting the divide-by-zero or NULL path; the missing synchronization allows races during device close.

How to fix it

Upgrade to a fixed kernel containing commit cbe9eb2c39d09f3c8574febcfa39d8c09d0c7cb5; for Red Hat OpenStack Director images update to rhosp-director-images 0:8.0-20160603.2.el7ost or equivalent; apply vendor kernel updates and reboot.

How to confirm the fix worked

Verify kernel source or package version includes the guard on xdp queues and NAPI bit check; test by loading/unloading XDP programs and cycling interface state while monitoring for oops or panics.

Typical attack path

1. Obtain ability to load/unload XDP programs or toggle interface state on GVE device
2. Ensure no XDP program is loaded or bring interface down while XDP state persists
3. Trigger XDP transmit operation to invoke unguarded NDO callback
4. Cause divide-by-zero or NULL dereference leading to kernel panic

How to detect it

Review kernel logs for oops, divide-by-zero, or NULL pointer messages referencing gve or xdp xmit paths; inspect for crashes coinciding with XDP program changes or interface down events.

What your security team should do

• Prioritize kernel upgrades on systems using GVE driver with XDP
• Apply patches containing the referenced commit across all affected distributions
• Test XDP functionality post-upgrade under load/unload and interface state changes
• Monitor vendor advisories for backports to older stable kernels