CVE-2024-40996

HIGH EPSS 19.7%
Published Jul 12, 20241y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Jul 12, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid splat in pskb_pull_reason syzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debug hint in pskb_may_pull. We'd like to retain this debug check because it might hint at integer overflows and other issues (kernel code should pull headers, not huge value). In bpf case, this splat isn't interesting at all: such (nonsensical) bpf programs are typically generated by a fuzzer anyway. Do what Eric suggested and suppress such warning. For CONFIG_DEBUG_NET=n we don't need the extra check because pskb_may_pull will do the right thing: return an error without the WARN() backtrace.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
19.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥6.1.86  –  <6.1.96
linuxlinux_kernel*≥6.6.27  –  <6.6.36
linuxlinux_kernel*≥6.9  –  <6.9.7
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any
linuxlinux_kernel6.10any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/2bbe3e5a2f4ef69d13be54f1cf895b4658287080
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5e90258303a358e88737afb5048bee9113beea3a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7f9644782c559635bd676c12c59389a34ed7c866
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/dacc15e9cb248d19e5fc63c54bef0b9b55007761
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2bbe3e5a2f4ef69d13be54f1cf895b4658287080
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5e90258303a358e88737afb5048bee9113beea3a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7f9644782c559635bd676c12c59389a34ed7c866
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/dacc15e9cb248d19e5fc63c54bef0b9b55007761
    Patch