PT-2024-32172 · Linux+5 · Linux Kernel+5
Martin Kafai Lau
+1
·
Published
2024-07-10
·
Updated
2026-04-20
·
CVE-2024-46754
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the Linux kernel, where the lwt seg6 related BPF ops can be invoked via
bpf test run() without entering input action end bpf() first. This is because the per-CPU variable seg6 bpf srh states::srh is never assigned in the self test case, but each BPF function expects it. The problem probably didn't work since it was introduced in commit 04d4b274e2a ("ipv6: sr: Add seg6local action End.BPF").Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu