Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-47675

bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() fails, bpf_uprobe_multi_link_attach() goes to the error_free label and frees the array of bpf_uprobe's without calling bpf_uprobe_unregister(). This leaks bpf_uprobe->uprobe and worse, this frees bpf_uprobe->consumer without removing it from the uprobe->consumers list.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 89ae89f53d201143560f1e9ed4bfa62eee34f88e to < 790c630ab0e7d7aba6d186581d4627c09fce60f3affected
  • 89ae89f53d201143560f1e9ed4bfa62eee34f88e to < 7c1d782e5afbf7c50ba74ecc4ddc18a05d63e5eeaffected
  • 89ae89f53d201143560f1e9ed4bfa62eee34f88e to < cdf27834c3dd5d9abf7eb8e4ee87ee9e307eb25caffected
  • 89ae89f53d201143560f1e9ed4bfa62eee34f88e to < 5fe6e308abaea082c20fbf2aa5df8e14495622cfaffected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 6.6.54 to ≤ 6.6.*unaffected
  • 6.10.13 to ≤ 6.10.*unaffected
  • 6.11.2 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References