CVE-2024-47675

bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()

State: Published
Severity: 7.8 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()

If bpf_link_prime() fails, bpf_uprobe_multi_link_attach() goes to the error_free label and frees the array of bpf_uprobe's without calling bpf_uprobe_unregister().

This leaks bpf_uprobe->uprobe and worse, this frees bpf_uprobe->consumer without removing it from the uprobe->consumers list.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	89ae89f53d201143560f1e9ed4bfa62eee34f88e to before 790c630ab0e7d7aba6d186581d4627c09fce60f3Affected 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before 7c1d782e5afbf7c50ba74ecc4ddc18a05d63e5eeAffected 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before cdf27834c3dd5d9abf7eb8e4ee87ee9e307eb25cAffected 89ae89f53d201143560f1e9ed4bfa62eee34f88e to before 5fe6e308abaea082c20fbf2aa5df8e14495622cfAffected
LinuxLinux	6.6Affected before 6.6Not affected 6.6.54 through 6.6.Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.