CVE-2024-42151 bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable
A missing nullable annotation in the Linux kernel BPF verifier allows a NULL pointer dereference, potentially causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-42151?
CVE-2024-42151 is a medium-severity vulnerability in Linux kernel, published on 30 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable
Test case dummy_st_ops/dummy_init_ret_value passes NULL as the first parameter of the test_1() function. Mark this parameter as nullable to make verifier aware of such possibility. Otherwise, NULL check in the test_1() code:
SEC("struct_ops/test_1") int BPF_PROG(test_1, struct bpf_dummy_ops_state *state) { if (!state) return ...;
... access state ... }
Might be removed by verifier, thus triggering NULL pointer dereference under certain conditions.
Weakness: CWE-476
Which versions are affected by CVE-2024-42151?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-42151?
Apply the vendor's patch.
Is CVE-2024-42151 being exploited?
There is no known exploitation of CVE-2024-42151 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-54059, AZL-54072, BELL-CVE-2024-42151, DEBIAN-CVE-2024-42151, GHSA-8h4c-r25h-3p7f, ROOT-OS-UBUNTU-2204-CVE-2024-42151 and 1 more.