NetSight
IP …
medium5.5

CVE-2024-40908

In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp test_run callback syzbot reported crash when rawtp program e…

Impact

In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp test_run callback syzbot reported crash when rawtp program executed through the test_run interface calls bpf_get_attach_cookie helper or any other helper that touches task->bpf_ctx pointer. Setting the run context (task->bpf_ctx pointer) for test_run callback.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.162
from 5.16 before 6.1.95
from 6.2 before 6.6.35
from 6.7 before 6.9.6
Version 6.10

References