High 7.8Published May 17, 2024

CVE-2024-27431cpumap: Zero-initialise xdp_rxq_info struct before running XDP program

Updated under an hour ago (Oct 27, 2026, 8:40 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-908
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	9216477449f33cdbc9c9a99d49f500b7fbb81702 builds before 5f4e51abfbe6eb444fa91906a5cd083044278297; from 9216477449f33cdbc9c9a99d49f500b7fbb81702 before f0363af9619c77730764f10360e36c6445c12f7b; 9216477449f33cdbc9c9a99d49f500b7fbb81702 builds before 3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95; from 9216477449f33cdbc9c9a99d49f500b7fbb81702 before f562e4c4aab00986dde3093c4be919c3f2b85a4a; from 9216477449f33cdbc9c9a99d49f500b7fbb81702 before eaa7cb836659ced2d9f814ac32aa3ec193803ed6; 9216477449f33cdbc9c9a99d49f500b7fbb81702 builds before 2487007aa3b9fafbd2cb14068f49791ce1d7ede5	CNA record
linux linux_kernel linux:linux_kernel	9216477449f3	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.9 before 5.10.213; from 5.11 before 5.15.152; from 5.16 before 6.1.82; from 6.2 before 6.6.22; from 6.7 before 6.7.10; 6.8; 6.8; 6.8; and 4 more ranges	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/5f4e51abfbe6eb444fa91906a5cd083044278297	patch
https://git.kernel.org/stable/c/f0363af9619c77730764f10360e36c6445c12f7b	patch
https://git.kernel.org/stable/c/3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95	patch
https://git.kernel.org/stable/c/f562e4c4aab00986dde3093c4be919c3f2b85a4a	patch
https://git.kernel.org/stable/c/eaa7cb836659ced2d9f814ac32aa3ec193803ed6	patch
https://git.kernel.org/stable/c/2487007aa3b9fafbd2cb14068f49791ce1d7ede5	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	third-party-advisory
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.