CVE-2024-40908

bpf: Set run context for rawtp test_run callback

State: Published
Severity: Not scored
Published: Jul 12, 2024
Updated: May 11, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Set run context for rawtp test_run callback

syzbot reported crash when rawtp program executed through the test_run interface calls bpf_get_attach_cookie helper or any other helper that touches task->bpf_ctx pointer.

Setting the run context (task->bpf_ctx pointer) for test_run callback.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7adfc6c9b315e174cf8743b21b7b691c8766791b to before 789bd77c9342aa6125003871ae5c6034d0f6f9d2Affected 7adfc6c9b315e174cf8743b21b7b691c8766791b to before 3708b6c2546c9eb34aead8a34a17e8ae69004e4dAffected 7adfc6c9b315e174cf8743b21b7b691c8766791b to before d387805d4b4a46ee01e3dae133c81b6d80195e5bAffected 7adfc6c9b315e174cf8743b21b7b691c8766791b to before ae0ba0ab7475a129ef7d449966edf677367efeb4Affected 7adfc6c9b315e174cf8743b21b7b691c8766791b to before d0d1df8ba18abc57f28fb3bc053b2bf319367f2cAffected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.162 through 5.15.Not affected 6.1.95 through 6.1.Not affected 6.6.35 through 6.6.Not affected 6.9.6 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

7adfc6c9b315e174cf8743b21b7b691c8766791b to before 789bd77c9342aa6125003871ae5c6034d0f6f9d2Affected
7adfc6c9b315e174cf8743b21b7b691c8766791b to before 3708b6c2546c9eb34aead8a34a17e8ae69004e4dAffected
7adfc6c9b315e174cf8743b21b7b691c8766791b to before d387805d4b4a46ee01e3dae133c81b6d80195e5bAffected
7adfc6c9b315e174cf8743b21b7b691c8766791b to before ae0ba0ab7475a129ef7d449966edf677367efeb4Affected
7adfc6c9b315e174cf8743b21b7b691c8766791b to before d0d1df8ba18abc57f28fb3bc053b2bf319367f2cAffected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.162 through 5.15.*Not affected
6.1.95 through 6.1.*Not affected
6.6.35 through 6.6.*Not affected
6.9.6 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.