Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-38564
HistoryJun 19, 2024 - 12:00 a.m.

CVE-2024-38564

2024-06-1900:00:00
ubuntu.com
ubuntu.com
3
linux kernel
vulnerability
cve-2024-38564
bpf_prog_type_cgroup_skb
link_create
cgroup_skb

AI Score

6.5

Confidence

High

In the Linux kernel, the following vulnerability has been resolved: bpf:
Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type
for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on
bpf_prog_attach_check_attach_type to properly verify prog_type <>
attach_type association. Add missing attach_type enforcement for the
link_create case. Otherwise, it’s currently possible to attach cgroup_skb
prog types to other cgroup hooks.