GPU VulnDB

Database/Firmware, BMC & network fabric

Linux bnxt_en driver (XDP_REDIRECT double DMA unmap): A double DMA unmap in the XDP_REDIRECT path

CVE-2024-44984Firmware, BMC & network fabriccurated

Impact

A double DMA unmap in the XDP_REDIRECT path. Double-unmapping a DMA region is a memory-corruption primitive that touches the IOMMU mapping state, which is precisely the mechanism that keeps a device from reaching memory it should not. Anywhere you run XDP-based load balancing or packet steering in front of inference serving — a common pattern — this is live code.

Who can reach it

Traffic through the driver's XDP_REDIRECT path on a host with an XDP program attached.

What to do

Kernel/driver upgrade plus host reboot. Interim: detach XDP programs from Broadcom NICs, which is a live change but costs you whatever the XDP program was doing.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.