CVE-2024-26589
Public on 2024-02-22
Modified on 2024-03-13
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
check_flow_keys_access() results in out of bounds access .
For PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off
for validation. However, variable offset ptr alu is not prohibited
for this ptr kind. So the variable offset is not checked.
CVSS v3 Base Score
See breakdown
