PT-2024-2046 · Linux+5 · Linux Kernel+5

Published 2024-01-17 · Updated 2025-09-29 · CVE-2024-26588

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0-rc4-loong-devel-gb62ab1a397cf

Description The vulnerability is related to out-of-bounds memory access in the LoongArch BPF (Berkeley Packet Filter) component of the Linux kernel. The test tag test triggers an unhandled page fault, indicating a memory access issue. The vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Technical details about exploitation include:

• The build body function is vulnerable to out-of-bounds memory access.
• The bpf int jit compile function is involved in the exploitation process.
• The bpf prog select runtime function is also involved.
• The bpf prog load function is used to load a BPF program with 2039 instructions, which triggers the vulnerability.
• The sys bpf and sys bpf functions are part of the system call chain that leads to the vulnerability.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the LoongArch BPF out-of-bounds memory access vulnerability. Specifically, for Linux kernel version 6.7.0-rc4-loong-devel-gb62ab1a397cf, update to a newer version that includes the necessary patches. As a temporary workaround, consider disabling the BPF component or restricting its use to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-3291

ALT-PU-2024-4263

ALT-PU-2024-4843

AZL-35907

BDU:2024-01924

CVE-2024-26588

USN-6688-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 99

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26588.json · Exploit
• https://ubuntu.com/security/CVE-2024-26627 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01924 · Security Note
• https://ubuntu.com/security/CVE-2024-26625 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26599 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52444 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52447 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26597 · Vendor Advisory
• https://git.kernel.org/stable/c/4631c2dd69d928bca396f9f58baeddf85e14ced5 · Patch
• https://ubuntu.com/security/CVE-2023-52445 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52588 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52438 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-26588 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26600 · Vendor Advisory