CVE-2024-40908

MEDIUM EPSS 19.4%
Published Jul 12, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Jul 12, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp test_run callback syzbot reported crash when rawtp program executed through the test_run interface calls bpf_get_attach_cookie helper or any other helper that touches task->bpf_ctx pointer. Setting the run context (task->bpf_ctx pointer) for test_run callback.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
19.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥5.15  –  <5.15.162
linuxlinux_kernel*≥5.16  –  <6.1.95
linuxlinux_kernel*≥6.2  –  <6.6.35
linuxlinux_kernel*≥6.7  –  <6.9.6
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/3708b6c2546c9eb34aead8a34a17e8ae69004e4d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/789bd77c9342aa6125003871ae5c6034d0f6f9d2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ae0ba0ab7475a129ef7d449966edf677367efeb4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d0d1df8ba18abc57f28fb3bc053b2bf319367f2c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d387805d4b4a46ee01e3dae133c81b6d80195e5b
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/3708b6c2546c9eb34aead8a34a17e8ae69004e4d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/789bd77c9342aa6125003871ae5c6034d0f6f9d2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ae0ba0ab7475a129ef7d449966edf677367efeb4
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d0d1df8ba18abc57f28fb3bc053b2bf319367f2c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d387805d4b4a46ee01e3dae133c81b6d80195e5b
    Patch