← CVE Intelligence

CVE-2024-50123

bpf: Add the missing BPF_LINK_TYPE invocation for sockmap PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap There is an out-of-bounds read in bpf_link_show_fdinfo() for the sockmap link fd. Fix it by adding the missing BPF_LINK_TYPE invocation for sockmap link Also add comments for bpf_link_type to prevent missing updates in the future.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 699c23f02c65cbfc3e638f14ce0d70c23a2e1f02 before 6d79f12c0ce2bc8ff5f109093df1734bd6450615; affected 699c23f02c65cbfc3e638f14ce0d70c23a2e1f02 before c2f803052bc7a7feb2e03befccc8e49b6ff1f5f5
Linux / Linuxaffected 6.10; unaffected 0 before 6.10; unaffected 6.11.6 through 6.11.*; unaffected 6.12 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.