CVE-2024-42068

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

State: Published
Severity: 7.8 High
Published: Jul 29, 2024
Updated: Oct 21, 2026
Reserved: Jul 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

set_memory_ro() can fail, leaving memory unprotected.

Check its return and take it into account as an error.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	60a3b2253c413cf601783b070507d7dd6620c954 to before a359696856ca9409fb97655c5a8ef0f549cb6e03Affected 60a3b2253c413cf601783b070507d7dd6620c954 to before e4f602e3ff749ba770bf8ff10196e18358de6720Affected 60a3b2253c413cf601783b070507d7dd6620c954 to before 2bbfffa802adc30b772d0e0f881a13c3804a965cAffected 60a3b2253c413cf601783b070507d7dd6620c954 to before 05412471beba313ecded95aa17b25fe84bb2551aAffected 60a3b2253c413cf601783b070507d7dd6620c954 to before 7d2cc63eca0c993c99d18893214abf8f85d566d8Affected
LinuxLinux	3.18Affected before 3.18Not affected 5.15.162 through 5.15.Not affected 6.1.97 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.9.8 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

60a3b2253c413cf601783b070507d7dd6620c954 to before a359696856ca9409fb97655c5a8ef0f549cb6e03Affected
60a3b2253c413cf601783b070507d7dd6620c954 to before e4f602e3ff749ba770bf8ff10196e18358de6720Affected
60a3b2253c413cf601783b070507d7dd6620c954 to before 2bbfffa802adc30b772d0e0f881a13c3804a965cAffected
60a3b2253c413cf601783b070507d7dd6620c954 to before 05412471beba313ecded95aa17b25fe84bb2551aAffected
60a3b2253c413cf601783b070507d7dd6620c954 to before 7d2cc63eca0c993c99d18893214abf8f85d566d8Affected

LinuxLinux

3.18Affected
before 3.18Not affected
5.15.162 through 5.15.*Not affected
6.1.97 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.9.8 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.