CVE-2024-38564

bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

References

Notes

 carnil> Vulnerable versions: 5.10.

Bugs

Status

Branch Status
upstream released (6.10-rc1) [543576ec15b17c0c93301ac8297333c7b6e84ac7]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.9-upstream-stable released (6.9.3) [b34bbc76651065a5eafad8ddff1eb8d1f8473172]
6.6-upstream-stable released (6.6.33) [6675c541f540a29487a802d3135280b69b9f568d]
6.1-upstream-stable needed
5.10-upstream-stable needed
4.19-upstream-stable N/A "Vulnerable code not present"
sid released (6.8.12-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security needed
5.10-bullseye-security needed
4.19-buster-security N/A "Vulnerable code not present"