CVE-2024-46754

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel, where the lwt seg6 related BPF ops can be invoked via bpf test run() without entering input action end bpf() first. This is because the per-CPU variable seg6 bpf srh states::srh is never assigned in the self test case, but each BPF function expects it. The problem probably didn't work since it was introduced in commit 04d4b274e2a ("ipv6: sr: Add seg6local action End.BPF").

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.