Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-42068

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() set_memory_ro() can fail, leaving memory unprotected. Check its return and take it into account as an error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 60a3b2253c413cf601783b070507d7dd6620c954 to < a359696856ca9409fb97655c5a8ef0f549cb6e03affected
  • 60a3b2253c413cf601783b070507d7dd6620c954 to < e4f602e3ff749ba770bf8ff10196e18358de6720affected
  • 60a3b2253c413cf601783b070507d7dd6620c954 to < 2bbfffa802adc30b772d0e0f881a13c3804a965caffected
  • 60a3b2253c413cf601783b070507d7dd6620c954 to < 05412471beba313ecded95aa17b25fe84bb2551aaffected
  • 60a3b2253c413cf601783b070507d7dd6620c954 to < 7d2cc63eca0c993c99d18893214abf8f85d566d8affected

Linux Linux

Default version status: affected

  • 3.18affected
  • 0 to < 3.18unaffected
  • 5.15.162 to ≤ 5.15.*unaffected
  • 6.1.97 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.9.8 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References