Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-36918
HistoryMay 30, 2024 - 12:00 a.m.

CVE-2024-36918

2024-05-3000:00:00
ubuntu.com
ubuntu.com
13
linux kernel
vulnerability
cve-2024-36918
bloom filter
map
value size
kmalloc_max_size
syzkaller
guard-rails
unix

AI Score

9.3

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: bpf:
Check bloom filter map value size This patch adds a missing check to bloom
filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the
bloom map in line with many other map types. The lack of this protection
can cause kernel crashes for value sizes that overflow int’s. Such a crash
was caught by syzkaller. The next patch adds more guard-rails at a lower
level.

AI Score

9.3

Confidence

High

EPSS

0

Percentile

15.5%