CVE-2024-42067

Published: Jul 29, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_memory_rox() can fail, leaving memory unprotected. Check return and bail out when bpf_jit_binary_lock_ro() returns an error.

Affected (2)

Products: Linux: Linux Kernel

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 6.6.37
Linux Linux Kernel	From 6.7 to 6.9.8

Related CWEs

Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

References (6)

https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/08f6c05feb1db21653e98ca84ea04ca032d014c7

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/9fef36cad60d4226f9d06953cd56d1d2f9119730

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.