Linux Kernel Vulnerability in virtio-net Affecting Various Distributions

CVE-2024-57843

What is CVE-2024-57843?

A vulnerability in the Linux kernel's virtio-net component may lead to instability in virtual machines, particularly when specific system configurations are in place. The issue arises when the size of the fragment exceeds the PAGE_SIZE while the request for a DMA buffer could potentially overflow. This flaw, introduced by a previous commit, was identified to cause reliable crashes and failures when transferring files using scp in a virtualized environment. The latest updates attempt to mitigate this problem by adjusting buffer lengths, aiming to stabilize VM operations and improve system reliability.

References