Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jose E. Marchesi

#45053of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2024-29776
5.5
2024-04-23
Linux · Linux Kernel · CVE-2024-42151
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the Linux kernel's bpf (Berkeley Packet Filter) functionality. A test case, dummy st ops/dummy init ret value, passes a NULL value as the first parameter to the `test 1()` function. To prevent a potential NULL pointer dereference, the `bpf dummy struct ops.test 1` parameter is marked as nullable. This change makes the verifier aware of the possibility of a NULL value being passed, thus preventing the removal of the NULL check in the `test 1()` code. The `test 1()` function is defined with the `SEC("struct ops/test 1")` annotation and uses the `struct bpf dummy ops state *state` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.