CVE-2024-43838 bpf: fix overflow check in adjust_jmp_off()
An integer overflow in the Linux kernel BPF subsystem allows attackers to potentially execute arbitrary code or escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-43838?
CVE-2024-43838 is a medium-severity vulnerability in Linux kernel, published on 17 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
bpf: fix overflow check in adjust_jmp_off()
adjust_jmp_off() incorrectly used the insn->imm field for all overflow check, which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case, not the general jump instruction case. Fix it by using insn->off for overflow check in the general case.
Weakness: CWE-190
Which versions are affected by CVE-2024-43838?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-43838?
Apply the vendor's patch.
Is CVE-2024-43838 being exploited?
There is no known exploitation of CVE-2024-43838 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-43838, DEBIAN-CVE-2024-43838, GHSA-hrq9-fvj6-g7g7, UBUNTU-CVE-2024-43838.