What’s Vulnerable › Vulnerabilities

CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-19 · updated 2026-10-27

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association. Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.

Affected products

• Linux kernel: from 5.10 before 6.6.33; from 6.7 before 6.8.12; from 6.9 before 6.9.3 — fixed in 6.6.33, 6.8.12, 6.9.3
• Linux kernel: 6.6 — fixed in 6.10

How to fix

Upgrade to a fixed version: Linux kernel 6.6.33, 6.8.12, 6.9.3; Linux kernel 6.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/543576ec15b17c0c93301ac8297333c7b6e84ac7
• https://git.kernel.org/stable/c/6675c541f540a29487a802d3135280b69b9f568d
• https://git.kernel.org/stable/c/67929e973f5a347f05fef064fea4ae79e7cdb5fd
• https://git.kernel.org/stable/c/b34bbc76651065a5eafad8ddff1eb8d1f8473172
• https://git.kernel.org/stable/c/543576ec15b17c0c93301ac8297333c7b6e84ac7
• https://git.kernel.org/stable/c/6675c541f540a29487a802d3135280b69b9f568d
• https://git.kernel.org/stable/c/67929e973f5a347f05fef064fea4ae79e7cdb5fd
• https://git.kernel.org/stable/c/b34bbc76651065a5eafad8ddff1eb8d1f8473172

Get alerted when CVE-2024-38564 or the next vulnerability affects your stack