Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-38566

bpf: Fix verifier assumptions about socket->sk

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix verifier assumptions about socket->sk The verifier assumes that 'sk' field in 'struct socket' is valid and non-NULL when 'socket' pointer itself is trusted and non-NULL. That may not be the case when socket was just created and passed to LSM socket_accept hook. Fix this verifier assumption and adjust tests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6fcd486b3a0a628c41f12b3a7329a18a2c74b351 to < 39f8a29330f433000e716eefc4b9abda05b71a82affected
  • 6fcd486b3a0a628c41f12b3a7329a18a2c74b351 to < 6f5ae91172a93abac9720ba94edf3ec8f4d7f24faffected
  • 6fcd486b3a0a628c41f12b3a7329a18a2c74b351 to < c58ccdd2483a1d990748cdaf94206b5d5986a001affected
  • 6fcd486b3a0a628c41f12b3a7329a18a2c74b351 to < 0db63c0b86e981a1e97d2596d64ceceba1a5470eaffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.8.12 to ≤ 6.8.*unaffected
  • 6.9.3 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References