Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-36918
HistoryMay 30, 2024 - 3:29 p.m.

CVE-2024-36918 bpf: Check bloom filter map value size

2024-05-3015:29:13
Linux
github.com
2
linux kernel
bloom filter
vulnerability
fix
bloom map

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check bloom filter map value size

This patch adds a missing check to bloom filter creating, rejecting
values above KMALLOC_MAX_SIZE. This brings the bloom map in line with
many other map types.

The lack of this protection can cause kernel crashes for value sizes
that overflow int’s. Such a crash was caught by syzkaller. The next
patch adds more guard-rails at a lower level.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial