NetSight
IP …
medium5.5

CVE-2024-38566

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix verifier assumptions about socket->sk The verifier assumes that 'sk' field in 'str…

Impact

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix verifier assumptions about socket->sk The verifier assumes that 'sk' field in 'struct socket' is valid and non-NULL when 'socket' pointer itself is trusted and non-NULL. That may not be the case when socket was just created and passed to LSM socket_accept hook. Fix this verifier assumption and adjust tests.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.4 before 6.6.33
from 6.7 before 6.8.12
from 6.9 before 6.9.3

References