Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-38662

bpf: Allow delete from sockmap/sockhash only if update is allowed

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Allow delete from sockmap/sockhash only if update is allowed We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_delete on a sockmap/sockhash. We don't intend to support this artificial use scenario. Extend the existing verifier allowed-program-type check for updating sockmap/sockhash to also cover deleting from a map. From now on only BPF programs which were previously allowed to update sockmap/sockhash can delete from these map types.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dd54b48db0c822ae7b520bc80751f0a0a173ef75 to < 29467edc23818dc5a33042ffb4920b49b090e63daffected
  • d1e73fb19a4c872d7a399ad3c66e8ca30e0875ec to < 11e8ecc5b86037fec43d07b1c162e233e131b1d9affected
  • a44770fed86515eedb5a7c00b787f847ebb134a5 to < 6693b172f008846811f48a099f33effc26068e1eaffected
  • 668b3074aa14829e2ac2759799537a93b60fef86 to < 000a65bf1dc04fb2b65e2abf116f0bc0fc2ee7b1affected
  • ff91059932401894e6c86341915615c5eb0eca48 to < b81e1c5a3c70398cf76631ede63a03616ed1ba3caffected
  • ff91059932401894e6c86341915615c5eb0eca48 to < 98e948fb60d41447fd8d2d0c3b8637fc6b6dc26daffected
  • f7990498b05ac41f7d6a190dc0418ef1d21bf058affected
  • 6af057ccdd8e7619960aca1f0428339f213b31cdaffected
  • 5.10.215 to < 5.10.219affected
  • 5.15.154 to < 5.15.161affected
  • 6.1.85 to < 6.1.93affected
  • 6.6.26 to < 6.6.33affected
  • 5.4.274 to < 5.5affected
  • 6.8.5 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 5.10.219 to ≤ 5.10.*unaffected
  • 5.15.161 to ≤ 5.15.*unaffected
  • 6.1.93 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.9.4 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References