Linux · Linux Kernel · CVE-2024-43910
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.10.0-rc3-00131-g66b586715063 #533
**Description**
The issue is related to a missing check in the BPF verifier, which can lead to out-of-bounds memory accesses. This occurs when a modified `CONST PTR TO DYNPTR` is passed to a global function as an argument, allowing BPF helpers to continue using the modified pointer and potentially compromising system stability.
Technical details about exploitation include:
- Vulnerable function: `bpf dynptr data`
- Vulnerable parameters or variables: `CONST PTR TO DYNPTR`
- Function names: `check func arg reg off()`, `process dynptr func()`
- API Endpoints: None explicitly mentioned
**Recommendations**
To resolve the issue, update the Linux kernel to a version that includes the fix for the missing `check func arg reg off()` in the BPF verifier. Specifically, versions after 6.10.0-rc3-00131-g66b586715063 #533 should include this fix.
As a temporary workaround, consider disabling the use of `CONST PTR TO DYNPTR` in global function arguments until a patch is available. However, this might not be feasible or could have significant performance implications, and thus, updating to a fixed kernel version is the recommended solution.
At the moment, there is no information about other mitigation measures or workarounds that do not involve updating the kernel.