What’s Vulnerable › Vulnerabilities

CVE-2024-42067: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-29 · updated 2026-10-21
• Weakness: CWE-252

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_memory_rox() can fail, leaving memory unprotected. Check return and bail out when bpf_jit_binary_lock_ro() returns an error.

Affected products

• Linux kernel: before 6.6.37; from 6.7 before 6.9.8 — fixed in 6.6.37, 6.9.8

How to fix

Upgrade to a fixed version: Linux kernel 6.6.37, 6.9.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a
• https://git.kernel.org/stable/c/c20d0fa873039bce82d4b1b2ffcda8bb22242790
• https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5
• https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a
• https://git.kernel.org/stable/c/08f6c05feb1db21653e98ca84ea04ca032d014c7
• https://git.kernel.org/stable/c/9fef36cad60d4226f9d06953cd56d1d2f9119730
• https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5

Get alerted when CVE-2024-42067 or the next vulnerability affects your stack