We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-47675

bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()



Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() If bpf_link_prime() fails, bpf_uprobe_multi_link_attach() goes to the error_free label and frees the array of bpf_uprobe's without calling bpf_uprobe_unregister(). This leaks bpf_uprobe->uprobe and worse, this frees bpf_uprobe->consumer without removing it from the uprobe->consumers list.

Reserved 2024-09-30 | Published 2024-10-21 | Updated 2024-11-19 | Assigner Linux

Product status

Default status
unaffected

89ae89f53d20 before 790c630ab0e7
affected

89ae89f53d20 before 7c1d782e5afb
affected

89ae89f53d20 before cdf27834c3dd
affected

89ae89f53d20 before 5fe6e308abae
affected

Default status
affected

6.6
affected

Any version before 6.6
unaffected

6.6.54
unaffected

6.10.13
unaffected

6.11.2
unaffected

6.12
unaffected

References

git.kernel.org/stable/c/790c630ab0e7d7aba6d186581d4627c09fce60f3

git.kernel.org/stable/c/7c1d782e5afbf7c50ba74ecc4ddc18a05d63e5ee

git.kernel.org/stable/c/cdf27834c3dd5d9abf7eb8e4ee87ee9e307eb25c

git.kernel.org/stable/c/5fe6e308abaea082c20fbf2aa5df8e14495622cf

cve.org (CVE-2024-47675)

nvd.nist.gov (CVE-2024-47675)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-47675

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.