CVE Database
/

CVE-2024-46754

Back to search

CVE-2024-46754

Published: Sep 18, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Remove tst_run from lwt_seg6local_prog_ops. The syzbot reported that the lwt_seg6 related BPF ops can be invoked via bpf_test_run() without without entering input_action_end_bpf() first. Martin KaFai Lau said that self test for BPF_PROG_TYPE_LWT_SEG6LOCAL probably didn't work since it was introduced in commit 04d4b274e2a ("ipv6: sr: Add seg6local action End.BPF"). The reason is that the per-CPU variable seg6_bpf_srh_states::srh is never assigned in the self test case but each BPF function expects it. Remove test_run for BPF_PROG_TYPE_LWT_SEG6LOCAL.

VendorProductVersions

Linux

Linux

affected
004d4b274e2a1a895a0e5dc66158b90a7d463d44 - < 9cd15511de7c619bbd0f54bb3f28e6e720ded5d6
affected
004d4b274e2a1a895a0e5dc66158b90a7d463d44 - < c13fda93aca118b8e5cd202e339046728ee7dddb

Linux

Linux

affected
4.18
unaffected
0 - < 4.18
unaffected
6.10.10 - <= 6.10.*
unaffected
6.11 - <= *

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now