CVE Catalog

CVE-2024-58100

Medium
Published: Translated: NVD NIST

Summary

In the Linux kernel, the BPF verifier now checks the changes_pkt_data property for extension programs. It decides whether to invalidate all packet pointers in the current state based on this property.

Risk Assessment

Incorrect checking could lead to BPF verification errors, potentially causing system crashes or incorrect behavior of BPF programs.

Recommendation

Install a Linux kernel update that includes the fix for the BPF verifier.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changes_pkt_data property of th

Vulnerability data from NVD (NIST) · CISA KEV · EPSS