What’s Vulnerable › Vulnerabilities

CVE-2024-36481: tracing/probes: fix error check in parse_btf_field()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-21 · updated 2026-06-17
• Weakness: CWE-754

Description

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: fix error check in parse_btf_field() btf_find_struct_member() might return NULL or an error via the ERR_PTR() macro. However, its caller in parse_btf_field() only checks for the NULL condition. Fix this by using IS_ERR() and returning the error up the stack.

Affected products

• Linux kernel: before 6.6; from 6.6.1 before 6.6.33; from 6.9 before 6.9.4; 6.10.0-rc1 — fixed in 6.6, 6.6.33, 6.9.4

How to fix

Upgrade to a fixed version: Linux kernel 6.6, 6.6.33, 6.9.4. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4ed468edfeb54c7202e559eba74c25fac6a0dad0
• https://git.kernel.org/stable/c/ad4b202da2c498fefb69e5d87f67b946e7fe1e6a
• https://git.kernel.org/stable/c/e569eb34970281438e2b48a3ef11c87459fcfbcb
• https://git.kernel.org/stable/c/4ed468edfeb54c7202e559eba74c25fac6a0dad0
• https://git.kernel.org/stable/c/ad4b202da2c498fefb69e5d87f67b946e7fe1e6a
• https://git.kernel.org/stable/c/e569eb34970281438e2b48a3ef11c87459fcfbcb

Get alerted when CVE-2024-36481 or the next vulnerability affects your stack