CVE-2024-35976

CVE-2024-35976 affects the Linux kernel’s XDP socket code (xsk) and relates to input validation for XDP_UMEM/COMPLETION_FILL_RING. KASAN reports slab-out-of-bounds read in copy_from_sockptr_offset and copy_from_sockptr during xsk_setsockopt, traced to improper handling of the optlen parameter in ...