CVE-2024-50123

bpf: Add the missing BPF_LINK_TYPE invocation for sockmap

High · published November 5, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Add the missing BPF_LINK_TYPE invocation for sockmap

There is an out-of-bounds read in bpf_link_show_fdinfo() for the sockmap

link fd. Fix it by adding the missing BPF_LINK_TYPE invocation for

sockmap link

Also add comments for bpf_link_type to prevent missing updates in the

future.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.3th percentile
Published
2024-11-05T17:10Z
EPSS history
Timeline
  • 05 NOV 17:10Z
    bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
    cvelistv5