Skip to content
Heist/ feed
Unrated

bpf: Allow delete from sockmap/sockhash only if update is allowed

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: bpf: Allow delete from sockmap/sockhash only if update is allowed We have seen an influx of syzkaller reports where a BPF program attached to a tracepoint triggers a locking rule violation by performing a map_delete on a sockmap/sockhash. We don't intend to support this artificial use scenario. Extend the existing verifier allowed-program-type check for updating sockmap/sockhash to also cover deleting from a map. From now on only BPF programs which were previously allowed to update sockmap/sockhash can delete from these map types.

Announced Source revision 1
Original source ↗

CVE-2024-38662

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-38662

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "dd54b48db0c822ae7b520bc80751f0a0a173ef75",
        "lessThan": "29467edc23818dc5a33042ffb4920b49b090e63d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "d1e73fb19a4c872d7a399ad3c66e8ca30e0875ec",
        "lessThan": "11e8ecc5b86037fec43d07b1c162e233e131b1d9",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a44770fed86515eedb5a7c00b787f847ebb134a5",
        "lessThan": "6693b172f008846811f48a099f33effc26068e1e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "668b3074aa14829e2ac2759799537a93b60fef86",
        "lessThan": "000a65bf1dc04fb2b65e2abf116f0bc0fc2ee7b1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "ff91059932401894e6c86341915615c5eb0eca48",
        "lessThan": "b81e1c5a3c70398cf76631ede63a03616ed1ba3c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "ff91059932401894e6c86341915615c5eb0eca48",
        "lessThan": "98e948fb60d41447fd8d2d0c3b8637fc6b6dc26d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f7990498b05ac41f7d6a190dc0418ef1d21bf058",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6af057ccdd8e7619960aca1f0428339f213b31cd",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "5.10.215",
        "lessThan": "5.10.219",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.15.154",
        "lessThan": "5.15.161",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.1.85",
        "lessThan": "6.1.93",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.6.26",
        "lessThan": "6.6.33",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.4.274",
        "lessThan": "5.5",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.8.5",
        "lessThan": "6.9",
        "versionType": "semver"
      }
    ],
    "programFiles": [
      "kernel/bpf/verifier.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.9"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.9",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.10.219",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.161",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.93",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.33",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.9.4",
        "versionType": "semver",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "kernel/bpf/verifier.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-38662

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26624 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement