CVE-2024-46764
published 2024-09-18CVE-2024-46764: In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the name…
PriorityP428high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.22%
13.0th percentile
In the Linux kernel, the following vulnerability has been resolved:
bpf: add check for invalid name in btf_name_valid_section()
If the length of the name string is 1 and the value of name[0] is NULL
byte, an OOB vulnerability occurs in btf_name_valid_section() and the
return value is true, so the invalid name passes the check.
To solve this, you need to check if the first position is NULL byte and
if the first character is printable.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.10.11-1 (forky) | linux 6.10.11-1 (forky) |
| linux | linux | — | — |
| linux | linux | >= bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786 < c8ffe2d4d37a05ce18c71b87421443c16f8475e5 | c8ffe2d4d37a05ce18c71b87421443c16f8475e5 |
| linux | linux | >= bd70a8fb7ca4fcb078086f4d96b048aaf1aa4786 < bb6705c3f93bed2af03d43691743d4c43e3c8e6f | bb6705c3f93bed2af03d43691743d4c43e3c8e6f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.10.11-1 | 6.10.11-1 |
| linux | linux_kernel | >= 0 < 6.10.11-1 | 6.10.11-1 |
| linux | linux_kernel | >= 6.9 < 6.10.10 | 6.10.10 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_debian7.1LOW
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: bpf: add check for invalid name in btf_name_valid_section()
vendor_redhat·2024-09-18·CVSS 7.1
CVE-2024-46764 [HIGH] CWE-125 kernel: bpf: add check for invalid name in btf_name_valid_section()
kernel: bpf: add check for invalid name in btf_name_valid_section()
In the Linux kernel, the following vulnerability has been resolved:
bpf: add check for invalid name in btf_name_valid_section()
If the length of the name string is 1 and the value of name[0] is NULL
byte, an OOB vulnerability occurs in btf_name_valid_section() and the
return value is true, so the invalid name passes the check.
To solve this, you need to check if the first position is NULL byte and
if the first character is printable.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux
Debian
CVE-2024-46764: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: add ch...
vendor_debian·2024·CVSS 7.1
CVE-2024-46764 [HIGH] CVE-2024-46764: linux - In the Linux kernel, the following vulnerability has been resolved: bpf: add ch...
In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the name string is 1 and the value of name[0] is NULL byte, an OOB vulnerability occurs in btf_name_valid_section() and the return value is true, so the invalid name passes the check. To solve this, you need to check if the first position is NULL byte and if the first character is printable.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved (fixed in 6.10.11-1)
sid: resolved (fixed in 6.10.11-1)
trixie: resolved (fixed in 6.10.11-1)
GHSA
GHSA-324v-cwrv-qmqr: In the Linux kernel, the following vulnerability has been resolved:
bpf: add check for invalid name in btf_name_valid_section()
If the length of the
ghsa_unreviewed·2024-09-18
CVE-2024-46764 [HIGH] CWE-125 GHSA-324v-cwrv-qmqr: In the Linux kernel, the following vulnerability has been resolved:
bpf: add check for invalid name in btf_name_valid_section()
If the length of the
In the Linux kernel, the following vulnerability has been resolved:
bpf: add check for invalid name in btf_name_valid_section()
If the length of the name string is 1 and the value of name[0] is NULL
byte, an OOB vulnerability occurs in btf_name_valid_section() and the
return value is true, so the invalid name passes the check.
To solve this, you need to check if the first position is NULL byte and
if the first character is printable.
OSV
CVE-2024-46764: In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the n
osv·2024-09-18·CVSS 7.1
CVE-2024-46764 [HIGH] CVE-2024-46764: In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the n
In the Linux kernel, the following vulnerability has been resolved: bpf: add check for invalid name in btf_name_valid_section() If the length of the name string is 1 and the value of name[0] is NULL byte, an OOB vulnerability occurs in btf_name_valid_section() and the return value is true, so the invalid name passes the check. To solve this, you need to check if the first position is NULL byte and if the first character is printable.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-09-18
Published