Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-38566
HistoryJun 19, 2024 - 1:35 p.m.

CVE-2024-38566 bpf: Fix verifier assumptions about socket->sk

2024-06-1913:35:33
Linux
github.com
1
linux kernel
bpf
vulnerability
verifier
socket
lsm

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix verifier assumptions about socket->sk

The verifier assumes that ‘sk’ field in ‘struct socket’ is valid
and non-NULL when ‘socket’ pointer itself is trusted and non-NULL.
That may not be the case when socket was just created and
passed to LSM socket_accept hook.
Fix this verifier assumption and adjust tests.

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial