What’s Vulnerable › Vulnerabilities

CVE-2024-36918: bpf: Check bloom filter map value size

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-30 · updated 2026-08-04
• Weakness: CWE-190

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the bloom map in line with many other map types. The lack of this protection can cause kernel crashes for value sizes that overflow int's. Such a crash was caught by syzkaller. The next patch adds more guard-rails at a lower level.

Affected products

• Linux kernel: from 5.16 before 6.1.91; from 6.2 before 6.6.31; from 6.7 before 6.8.10; 6.9-rc1 — fixed in 6.1.91, 6.6.31, 6.8.10

How to fix

Upgrade to a fixed version: Linux kernel 6.1.91, 6.6.31, 6.8.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/608e13706c8b6c658a0646f09ebced74ec367f7c
• https://git.kernel.org/stable/c/a8d89feba7e54e691ca7c4efc2a6264fa83f3687
• https://git.kernel.org/stable/c/c418afb9bf23e2f2b76cb819601e4a5d9dbab42d
• https://git.kernel.org/stable/c/fa6995eeb62e74b5a1480c73fb7b420c270784d3
• https://git.kernel.org/stable/c/608e13706c8b6c658a0646f09ebced74ec367f7c
• https://git.kernel.org/stable/c/a8d89feba7e54e691ca7c4efc2a6264fa83f3687
• https://git.kernel.org/stable/c/c418afb9bf23e2f2b76cb819601e4a5d9dbab42d
• https://git.kernel.org/stable/c/fa6995eeb62e74b5a1480c73fb7b420c270784d3

Get alerted when CVE-2024-36918 or the next vulnerability affects your stack