PT-2024-29776 · Linux+4 · Linux Kernel+4

Jose E. Marchesi

·

Published

2024-04-23

·

Updated

2026-05-26

·

CVE-2024-42151

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the Linux kernel's bpf (Berkeley Packet Filter) functionality. A test case, dummy st ops/dummy init ret value, passes a NULL value as the first parameter to the test 1() function. To prevent a potential NULL pointer dereference, the bpf dummy struct ops.test 1 parameter is marked as nullable. This change makes the verifier aware of the possibility of a NULL value being passed, thus preventing the removal of the NULL check in the test 1() code. The test 1() function is defined with the SEC("struct ops/test 1") annotation and uses the struct bpf dummy ops state *state parameter.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALT-PU-2025-12647
AZL-54059
AZL-54072
BDU:2025-02975
CVE-2024-42151
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Ubuntu