CVE-2024-38574

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null-pointer dereference in the libbpf component of the Linux kernel. Specifically, in the bpf objec load prog() function, there is no guarantee that obj->btf is non-NULL when passed to btf fd(), which does not perform any checks before dereferencing its argument. This can lead to segmentation fault errors when trying to load programs without BTF information, for example, in bpftool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.