QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-38564

Back to search

CVE-2024-38564

Published: Jun 19, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association. Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.

VendorProductVersions

Linux

Linux

affected
4a1e7c0c63e02daad751842b7880f9bbcdfb6e89 - < 6675c541f540a29487a802d3135280b69b9f568d
affected
4a1e7c0c63e02daad751842b7880f9bbcdfb6e89 - < 67929e973f5a347f05fef064fea4ae79e7cdb5fd
affected
4a1e7c0c63e02daad751842b7880f9bbcdfb6e89 - < b34bbc76651065a5eafad8ddff1eb8d1f8473172
affected
4a1e7c0c63e02daad751842b7880f9bbcdfb6e89 - < 543576ec15b17c0c93301ac8297333c7b6e84ac7

Linux

Linux

affected
5.10
unaffected
0 - < 5.10
unaffected
6.6.33 - <= 6.6.*
unaffected
6.8.12 - <= 6.8.*
unaffected
6.9.3 - <= 6.9.*

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now