Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-50123

bpf: Add the missing BPF_LINK_TYPE invocation for sockmap

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap There is an out-of-bounds read in bpf_link_show_fdinfo() for the sockmap link fd. Fix it by adding the missing BPF_LINK_TYPE invocation for sockmap link Also add comments for bpf_link_type to prevent missing updates in the future.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 699c23f02c65cbfc3e638f14ce0d70c23a2e1f02 to < 6d79f12c0ce2bc8ff5f109093df1734bd6450615affected
  • 699c23f02c65cbfc3e638f14ce0d70c23a2e1f02 to < c2f803052bc7a7feb2e03befccc8e49b6ff1f5f5affected

Linux Linux

Default version status: affected

  • 6.10affected
  • 0 to < 6.10unaffected
  • 6.11.6 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References