Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42151
HistoryJul 30, 2024 - 7:46 a.m.

CVE-2024-42151 bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable

2024-07-3007:46:43
Linux
github.com
linux kernel
vulnerability
bpf
parameter nullable
verifier
null pointer

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable

Test case dummy_st_ops/dummy_init_ret_value passes NULL as the first
parameter of the test_1() function. Mark this parameter as nullable to
make verifier aware of such possibility.
Otherwise, NULL check in the test_1() code:

  SEC("struct_ops/test_1")
  int BPF_PROG(test_1, struct bpf_dummy_ops_state *state)
  {
        if (!state)
                return ...;

        ... access state ...
  }

Might be removed by verifier, thus triggering NULL pointer dereference
under certain conditions.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-42151