What’s Vulnerable › Vulnerabilities

CVE-2024-38566: bpf: Fix verifier assumptions about socket->sk

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-19 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix verifier assumptions about socket->sk The verifier assumes that 'sk' field in 'struct socket' is valid and non-NULL when 'socket' pointer itself is trusted and non-NULL. That may not be the case when socket was just created and passed to LSM socket_accept hook. Fix this verifier assumption and adjust tests.

Affected products

• Linux kernel: from 6.4 before 6.6.33; from 6.7 before 6.8.12; from 6.9 before 6.9.3 — fixed in 6.6.33, 6.8.12, 6.9.3

How to fix

Upgrade to a fixed version: Linux kernel 6.6.33, 6.8.12, 6.9.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0db63c0b86e981a1e97d2596d64ceceba1a5470e
• https://git.kernel.org/stable/c/39f8a29330f433000e716eefc4b9abda05b71a82
• https://git.kernel.org/stable/c/6f5ae91172a93abac9720ba94edf3ec8f4d7f24f
• https://git.kernel.org/stable/c/c58ccdd2483a1d990748cdaf94206b5d5986a001
• https://git.kernel.org/stable/c/0db63c0b86e981a1e97d2596d64ceceba1a5470e
• https://git.kernel.org/stable/c/39f8a29330f433000e716eefc4b9abda05b71a82
• https://git.kernel.org/stable/c/6f5ae91172a93abac9720ba94edf3ec8f4d7f24f
• https://git.kernel.org/stable/c/c58ccdd2483a1d990748cdaf94206b5d5986a001

Get alerted when CVE-2024-38566 or the next vulnerability affects your stack