NetSight
IP …
high7.8

CVE-2024-36918

In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter crea…

Impact

In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the bloom map in line with many other map types. The lack of this protection can cause kernel crashes for value sizes that overflow int's. Such a crash was caught by syzkaller. The next patch adds more guard-rails at a lower level.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.16 before 6.1.91
from 6.2 before 6.6.31
from 6.7 before 6.8.10
Version 6.9

Weakness classification

CWE-190

References