CVE-2024-27431: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27431 affects the Linux kernel's cpumap functionality. The vulnerability was discovered when it was found that the xdp_rxq_info data structure was not properly initialized before running XDP programs attached to cpumap entries. This issue was first reported by Tobias Böhm and was fixed in March 2024 (Kernel Git).

The vulnerability stems from an uninitialized xdp_rxq_info structure in the Linux kernel's cpumap functionality. When running an XDP program attached to a cpumap entry, the xdp_rxq_info data structure used in the xdp_buff that backs the XDP program invocation was not initialized. This resulted in random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. The issue exposes the contents of uninitialized memory, which is considered a security risk. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability allows exposure of uninitialized memory contents through the rx_queue_index value, which could potentially lead to information disclosure. The issue primarily affects systems running XDP programs with cpumap attachments (Kernel Git).

The vulnerability requires local access and can be triggered when running XDP programs that are attached to cpumap entries. The issue has been classified with CWE-908 (Use of Uninitialized Resource) (NVD).

The vulnerability has been fixed by zero-initializing the rxq data structure before running the XDP program. The fix was implemented in the Linux kernel through a patch that modifies the kernel/bpf/cpumap.c file. Users should update their Linux kernel to a version that includes this fix (Kernel Git).