CVE-2024-38662
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Allow delete from sockmap/sockhash only if update is allowed We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_delete on a sockmap/sockhash. We don't intend to support this artificial use scenario. Extend the existing verifier allowed-program-type check for updating sockmap/sockhash to also cover deleting from a map. From now on only BPF programs which were previously allowed to update sockmap/sockhash can delete from these map types.
How to fix
- linux linux_kernel5.10.219, 5.15.161, 6.1.93, 6.6.33, 6.9.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.10 ≤ v < 5.10.219, 5.15 ≤ v < 5.15.161, 6.1 ≤ v < 6.1.93, 6.6 ≤ v < 6.6.33, 6.9 ≤ v < 6.9.4, 6.10.0 | 5.10.219, 5.15.161, 6.1.93, 6.6.33, 6.9.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.