Riskcovery

CVE-2024-38564

bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

State
Published
Severity
7.8 High
Published
Jun 19, 2024
Updated
Oct 27, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association.

Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3505cb9fa26cfec9512744466e754a8cbc2365b0 to before 6675c541f540a29487a802d3135280b69b9f568dAffected
  • 3505cb9fa26cfec9512744466e754a8cbc2365b0 to before 67929e973f5a347f05fef064fea4ae79e7cdb5fdAffected
  • 3505cb9fa26cfec9512744466e754a8cbc2365b0 to before b34bbc76651065a5eafad8ddff1eb8d1f8473172Affected
  • 3505cb9fa26cfec9512744466e754a8cbc2365b0 to before 543576ec15b17c0c93301ac8297333c7b6e84ac7Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.8.12 through 6.8.*Not affected
  • 6.9.3 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.