Answer in brief
CVE-2024-27431 records a Unknown severity vulnerability in cpumap: Zero-initialise xdp_rxq_info struct before running XDP program. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic), linux/linux_kernel (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), linux/linux_kernel (generic), linux/linux_kernel (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9216477449f33cdbc9c9a99d49f500b7fbb81702 <5f4e51abfbe6eb444fa91906a5cd083044278297 || >=9216477449f33cdbc9c9a99d49f500b7fbb81702 <f0363af9619c77730764f10360e36c6445c12f7b || >=9216477449f33cdbc9c9a99d49f500b7fbb81702 <3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95 || >=9216477449f33cdbc9c9a99d49f500b7fbb81702 <f562e4c4aab00986dde3093c4be919c3f2b85a4a || >=9216477449f33cdbc9c9a99d49f500b7fbb81702 <eaa7cb836659ced2d9f814ac32aa3ec193803ed6 || >=9216477449f33cdbc9c9a99d49f500b7fbb81702 <2487007aa3b9fafbd2cb14068f49791ce1d7ede5 | 5f4e51abfbe6eb444fa91906a5cd083044278297, f0363af9619c77730764f10360e36c6445c12f7b, 3420b3ff1ff489c177ea1cb7bd9fbbc4e9a0be95, f562e4c4aab00986dde3093c4be919c3f2b85a4a, eaa7cb836659ced2d9f814ac32aa3ec193803ed6, 2487007aa3b9fafbd2cb14068f49791ce1d7ede5 |
| Linux/Linuxgeneric | 5.9 | Not reported |
| linux/linux_kernelgeneric | 9216477449f3 | Not reported |
| linux/linux_kernelgeneric | 5.9 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
May 17, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdp_rxq_info struct before running XDP program When running an XDP program that is attached to a cpumap entry, we don't initialise the xdp_rxq_info data structure being used in the xdp_buff that backs the XDP program invocation. Tobias noticed that this leads to random values being returned as the xdp_md->rx_queue_index value for XDP programs running in a cpumap. This means we're basically returning the contents of the uninitialised memory, which is bad. Fix this by zero-initialising the rxq data structure before running the XDP program.
Quoted source text, attributed separately from HOL analysis.