CVE-2024-56720

Summary

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Several fixes to bpf_msg_pop_data

Several fixes to bpf_msg_pop_data,

  1. In sk_msg_shift_left, we should put_page
  2. if (len == 0), return early is better
  3. pop the entire sk_msg (last == msg->sg.size) should be supported
  4. Fix for the value of variable "a"
  5. In sk_msg_shift_left, after shifting, i has already pointed to the next element. Addtional sk_msg_iter_var_next may result in BUG.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < d3f5763b3062514a234114e97bbde74d8d702449affected
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < d26d977633d1d0b8bf9407278189bd0a8d973323affected
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < e1f54c61c4c9a5244eb8159dce60d248f7d97b32affected
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < f58d3aa457e77a3d9b3df2ab081dcf9950f6029faffected
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < 98c7ea7d11f2588e8197db042e0291e4ac8f8346affected
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < 785180bed9879680d8e5c5e1b54c8ae8d948f4c8affected
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < 275a9f3ef8fabb0cb282a62b9e164dedba7284c5affected
LinuxLinux7246d8ed4dcce23f7509949a77be15fa9f0e3d28 < 5d609ba262475db450ba69b8e8a557bd768ac07aaffected
LinuxLinux5.0affected
LinuxLinux0 < 5.0unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References