PT-2024-28072 · Linux+8 · Linux Kernel+8
Published
2024-04-30
·
Updated
2026-05-26
·
CVE-2024-38564
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue concerns the Linux kernel, where a vulnerability has been resolved by adding BPF PROG TYPE CGROUP SKB attach type enforcement in BPF LINK CREATE. The
bpf prog attach function uses attach type to prog type to enforce the proper attach type for BPF PROG TYPE CGROUP SKB, while link create uses bpf prog get and relies on bpf prog attach check attach type to verify the association between prog type and attach type. Without this enforcement, it was possible to attach cgroup skb prog types to other cgroup hooks.Recommendations
To resolve the issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider restricting the use of
BPF PROG TYPE CGROUP SKB until the update is applied.Exploit
Fix
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Rocky Linux
Suse
Ubuntu