CVE-2024-43910

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0-rc3-00131-g66b586715063 #533

Description The issue is related to a missing check in the BPF verifier, which can lead to out-of-bounds memory accesses. This occurs when a modified CONST PTR TO DYNPTR is passed to a global function as an argument, allowing BPF helpers to continue using the modified pointer and potentially compromising system stability.

Technical details about exploitation include:

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the missing check func arg reg off() in the BPF verifier. Specifically, versions after 6.10.0-rc3-00131-g66b586715063 #533 should include this fix.

As a temporary workaround, consider disabling the use of CONST PTR TO DYNPTR in global function arguments until a patch is available. However, this might not be feasible or could have significant performance implications, and thus, updating to a fixed kernel version is the recommended solution.

At the moment, there is no information about other mitigation measures or workarounds that do not involve updating the kernel.