Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-38564
HistoryJun 20, 2024 - 12:00 a.m.

CVE-2024-38564

2024-06-2000:00:00
ubuntu.com
ubuntu.com
linux kernel
vulnerability
cve-2024-38564
bpf_prog_type_cgroup_skb
link_create
cgroup_skb

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in
BPF_LINK_CREATE
bpf_prog_attach uses attach_type_to_prog_type to enforce proper
attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses
bpf_prog_get and relies on bpf_prog_attach_check_attach_type
to properly verify prog_type <> attach_type association.
Add missing attach_type enforcement for the link_create case.
Otherwise, it’s currently possible to attach cgroup_skb prog
types to other cgroup hooks.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%