PT-2024-19679

CVE-2024-2313

·

Published

2024-03-10

·

Updated

2025-03-17

Description by

CVSS 3.1
2.8
Low
MetricsAV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions bpftrace (affected versions not specified)
Description The issue allows an unprivileged attacker to force bcc to load compromised Linux headers if kernel headers need to be extracted and are not provided by default. This can occur because bpftrace attempts to load the headers from a temporary directory. Linux distributions that provide kernel headers by default are not affected.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2024:8830
ALSA-2024:9188
AZL-35836
AZL-35874
CESA-2024_8830
INFSA-2024_8830
INFSA-2024_9188
OPENSUSE-SU-2024:13986-1
RHSA-2024:8830
RHSA-2024_8830
RHSA-2024:9188
RHSA-2024_9188
RLSA-2024:8830
RLSA-2024:9188
Found an issue in the description? Have something to add? Feel free to write us 👾