CVE-2024-35860

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved by adding support to defer bpf link dealloc to after RCU grace period. BPF link for some program types is passed as a "context" which can be used by those BPF programs to look up additional information, such as multi-kprobes and multi-uprobes, which use the link to fetch BPF cookie values. The patch adds generic support to defer bpf link dealloc callback to after RCU GP, if requested, by exposing two different deallocation callbacks, one synchronous and one deferred. BPF is using two flavors of RCU: "classic" non-sleepable one and RCU tasks trace one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.