What’s Vulnerable › Vulnerabilities

CVE-2024-50123: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-05 · updated 2026-06-17
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap There is an out-of-bounds read in bpf_link_show_fdinfo() for the sockmap link fd. Fix it by adding the missing BPF_LINK_TYPE invocation for sockmap link Also add comments for bpf_link_type to prevent missing updates in the future.

Affected products

• Linux kernel: from 6.10 before 6.11.6; 6.12-rc1, 6.12-rc2, 6.12-rc3, 6.12-rc4 — fixed in 6.11.6

How to fix

Upgrade to a fixed version: Linux kernel 6.11.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/6d79f12c0ce2bc8ff5f109093df1734bd6450615
• https://git.kernel.org/stable/c/c2f803052bc7a7feb2e03befccc8e49b6ff1f5f5

Get alerted when CVE-2024-50123 or the next vulnerability affects your stack