CVE-2024-42067CWE-252

CVE-2024-42067

High · published July 29, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

set_memory_rox() can fail, leaving memory unprotected.

Check return and bail out when bpf_jit_binary_lock_ro() returns

an error.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Weakness
CWE-252 · Unchecked Return Value
Published
2024-07-29T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel< 6.6.376.6.37
linux/linux_kernel≥ 6.7, < 6.9.86.9.8
References (7)
https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c20d0fa873039bce82d4b1b2ffcda8bb22242790 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/08f6c05feb1db21653e98ca84ea04ca032d014c7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9fef36cad60d4226f9d06953cd56d1d2f9119730 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 JUL 15:52Z
    bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
    cvelistv5