CVE-2024-2314
If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory
Low · published March 10, 2024
What it is
If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.
The record
Technical detail
- CVSS v3.1
- 2.8 · LOW
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00218 · 11.7th percentile
- Published
- 2024-03-10T22:54Z
EPSS history
Timeline