2293427 – (CVE-2024-38566) CVE-2024-38566 kernel: bpf: Fix verifier assumptions about socket->sk

Bug 2293427 (CVE-2024-38566) - CVE-2024-38566 kernel: bpf: Fix verifier assumptions about socket->sk

Summary: CVE-2024-38566 kernel: bpf: Fix verifier assumptions about socket->sk

Keywords:
Status:	NEW
Alias:	CVE-2024-38566
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	low
Severity:	low
Target Milestone:	---
Assignee:	Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:	2293462
TreeView+	depends on / blocked

Reported:	2024-06-20 15:27 UTC by Patrick Del Bello
Modified:	2024-07-25 03:19 UTC (History)
CC List:	5 users (show)
Fixed In Version:	kernel 6.6.33, kernel 6.8.12, kernel 6.9.3, kernel 6.10-rc1
Doc Type:	If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description Patrick Del Bello 2024-06-20 15:27:37 UTC

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix verifier assumptions about socket-&gt;sk

The Linux kernel CVE team has assigned CVE-2024-38566 to this issue.

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024061955-CVE-2024-38566-0ac6@gregkh/T

Note You need to log in before you can comment on or make changes to this bug.