2 matches found
CVE-2024-35860 bpf: support deferring bpf_link dealloc to after RCU grace period
In the Linux kernel, the following vulnerability has been resolved: bpf: support deferring bpflink dealloc to after RCU grace period BPF link for some program types is passed as a "context" which can be used by those BPF programs to look up additional information. E.g., for multi-kprobes and...
7.8CVSS6AI score
SaveExploits0References6
CVE-2024-35860
CVE-2024-35860 : Linux kernel vulnerability in deferring bpf_link deallocation to after RCU grace period. When a bpf_link’s refcnt drops to zero, some active BPF programs could still access the link data via context, risking data access. The patch introduces two deallocation callbacks (synchronou...
7.8CVSS6.6AI score0.00234EPSS
SaveExploits0References3Affected Software1
20