Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-2313
HistoryMar 06, 2024 - 12:00 a.m.

CVE-2024-2313

2024-03-0600:00:00
ubuntu.com
ubuntu.com
4
cve-2024-2313
kernel headers extraction
bpftrace
unprivileged attacker
temporary directory
linux distributions

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

AI Score

3.7

Confidence

High

EPSS

0

Percentile

9.0%

If kernel headers need to be extracted, bpftrace will attempt to load them
from a temporary directory. An unprivileged attacker could use this to
force bcc to load compromised linux headers. Linux distributions which
provide kernel headers by default are not affected by default.

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

AI Score

3.7

Confidence

High

EPSS

0

Percentile

9.0%