CVE-2024-26589

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's bpf (Berkeley Packet Filter) functionality, specifically with the check flow keys access() function. This function only uses fixed offset for validation, but variable offset ptr alu is not prohibited for the PTR TO FLOW KEYS ptr kind, leading to out-of-bounds access. The vulnerability can cause a page fault when trying to access a memory address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.