Lucene search
+L

7533 matches found

CVE
CVE
•added 2024/12/29 11:29 a.m.•181 views

CVE-2024-56720

The CVE-2024-56720 issue affects the Linux kernel’s BPF sockmap/bpf_msg_pop_data handling. The fixed changes address bpf_msg_pop_data in sk_msg_shift_left, including: using put_page in sk_msg_shift_left; returning early when len == 0; supporting popping the entire sk_msg (last == msg->sg.size)...

7.8CVSS6.5AI score0.00242EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
•added 2024/12/29 11:29 a.m.•28 views

CVE-2024-56720

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpfmsgpopdata Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, we should putpage 2. if len == 0, return early is better 3. pop the entire skmsg last == msg-sg.size should be supported 4. Fix fo...

7.8CVSS5.5AI score0.00242EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/12/29 11:29 a.m.•23 views

CVE-2024-56720 bpf, sockmap: Several fixes to bpf_msg_pop_data

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpfmsgpopdata Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, we should putpage 2. if len == 0, return early is better 3. pop the entire skmsg last == msg-sg.size should be supported 4. Fix fo...

7.8CVSS6AI score
SaveExploits0References13
Cvelist
Cvelist
•added 2024/12/29 11:29 a.m.•41 views

CVE-2024-56720 bpf, sockmap: Several fixes to bpf_msg_pop_data

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpfmsgpopdata Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, we should putpage 2. if len == 0, return early is better 3. pop the entire skmsg last == msg-sg.size should be supported 4. Fix fo...

7.8CVSS0.00242EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2024/12/29 3:48 a.m.•18 views

SUSE CVE-2024-56694

In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SKPASS When the streamverdict program returns SKPASS, it places the received skb into its own receive queue, but a recursive lock eventually occurs, leading to an operating syst...

5.5CVSS7.7AI score0.00412EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2024/12/29 12:00 a.m.•3 views

PT-2024-37033

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns several fixes to bpf msg pop data in the Linux kernel, specifically in the bpf and sockmap components. The fixes address various problems, including the need to put pa...

7.8CVSS0.00242EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/29 12:00 a.m.•3 views

CVE-2024-56720: Off-by-one Error

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpfmsgpopdata Several fixes to bpfmsgpopdata, 1. In skmsgshiftleft, we should putpage 2. if len == 0, return early is better 3. pop the entire skmsg last == msg-sg.size should be supported 4. Fix fo...

7.8CVSS5.8AI score0.00242EPSS
SaveExploits0References11
osv_ubuntu
osv_ubuntu
•added 2024/12/28 10:15 a.m.•20 views

UBUNTU-CVE-2024-56702

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain cases, a raw tracepoint argument may end up being...

5.6CVSS5.9AI score0.00216EPSS
SaveExploits0References9
osv_ubuntu
osv_ubuntu
•added 2024/12/28 10:15 a.m.•26 views

UBUNTU-CVE-2024-56694

In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SKPASS When the streamverdict program returns SKPASS, it places the received skb into its own receive queue, but a recursive lock eventually occurs, leading to an operating syst...

7.5CVSS6.3AI score0.00412EPSS
SaveExploits0References43
Debian CVE
Debian CVE
•added 2024/12/28 9:46 a.m.•29 views

CVE-2024-56702

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain cases, a raw tracepoint argument may end up being...

5.5CVSS5.6AI score0.00216EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2024/12/28 9:46 a.m.•20 views

CVE-2024-56694

In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SKPASS When the streamverdict program returns SKPASS, it places the received skb into its own receive queue, but a recursive lock eventually occurs, leading to an operating syst...

7.5CVSS5.7AI score0.00412EPSS
SaveExploits0
CVE
CVE
•added 2024/12/28 9:46 a.m.•186 views

CVE-2024-56694

Technical details about CVE-2024-56694 are not provided in the supplied documents; public information appears scattered across multiple advisories. Monitor for official updates and patches for confirmation.

7.5CVSS6.5AI score0.00412EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2024/12/28 9:46 a.m.•49 views

CVE-2024-56694 bpf: fix recursive lock when verdict program return SK_PASS

In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SKPASS When the streamverdict program returns SKPASS, it places the received skb into its own receive queue, but a recursive lock eventually occurs, leading to an operating syst...

7.5CVSS0.00412EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2024/12/28 3:54 a.m.•25 views

CVE-2024-56665

In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fix invalid progarray access in perfeventdetachbpfprog Syzbot reported 1 crash that happens for following tracing scenario: - create tracepoint perf event with attr.inherit=1, attach it to the process and set bpf progra...

5.5CVSS6.9AI score0.0022EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/12/28 2:59 a.m.•21 views

CVE-2024-56675

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF via mismatching bpfprog/attachment RCU flavors Uprobes always use bpfprogrunarrayuprobe under tasks-trace-RCU protection. But it is possible to attach a non-sleepable BPF program to a uprobe, and non-sleepable BPF...

6.7CVSS6.9AI score0.00229EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/28 12:00 a.m.•20 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from multiple issues in the bpfmsgpopdata function in the bpf module, which could lead to memory errors...

5.5CVSS6.7AI score0.00204EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/28 12:00 a.m.•23 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect handling of the raw tracepoint parameter in the bpf subsystem, causing the kernel to crash...

5.5CVSS6.5AI score0.00216EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/28 12:00 a.m.•4 views

CVE-2024-56702: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark rawtp arguments with PTRMAYBENULL Arguments to a raw tracepoint are tagged as trusted, which carries the semantics that the pointer will be non-NULL. However, in certain cases, a raw tracepoint argument may end up being...

5.5CVSS5.7AI score0.00216EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/28 12:00 a.m.•10 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the bpf module when the streamverdict program returns SKPASS resulting in a recursive lock and an operating...

5.5CVSS6.5AI score0.00412EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/28 12:00 a.m.•2 views

CVE-2024-56694: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict program return SKPASS When the streamverdict program returns SKPASS, it places the received skb into its own receive queue, but a recursive lock eventually occurs, leading to an operating syst...

7.5CVSS5.9AI score0.00412EPSS
SaveExploits0References8
Rows per page
Query Builder