CVE-2024-47703
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/10/2024
Last modified:
24/10/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bpf, lsm: Add check for BPF LSM return value<br />
<br />
A bpf prog returning a positive number attached to file_alloc_security<br />
hook makes kernel panic.<br />
<br />
This happens because file system can not filter out the positive number<br />
returned by the LSM prog using IS_ERR, and misinterprets this positive<br />
number as a file pointer.<br />
<br />
Given that hook file_alloc_security never returned positive number<br />
before the introduction of BPF LSM, and other BPF LSM hooks may<br />
encounter similar issues, this patch adds LSM return value check<br />
in verifier, to ensure no unexpected value is returned.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.7 (including) | 6.10.13 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.11 (including) | 6.11.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page