CVE-2024-46754
Published: Sep 18, 2024
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Remove tst_run from lwt_seg6local_prog_ops. The syzbot reported that the lwt_seg6 related BPF ops can be invoked via bpf_test_run() without without entering input_action_end_bpf() first. Martin KaFai Lau said that self test for BPF_PROG_TYPE_LWT_SEG6LOCAL probably didn't work since it was introduced in commit 04d4b274e2a ("ipv6: sr: Add seg6local action End.BPF"). The reason is that the per-CPU variable seg6_bpf_srh_states::srh is never assigned in the self test case but each BPF function expects it. Remove test_run for BPF_PROG_TYPE_LWT_SEG6LOCAL.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 004d4b274e2a1a895a0e5dc66158b90a7d463d44 - < 9cd15511de7c619bbd0f54bb3f28e6e720ded5d6affected 004d4b274e2a1a895a0e5dc66158b90a7d463d44 - < c13fda93aca118b8e5cd202e339046728ee7dddb |
Linux | Linux | affected 4.18unaffected 0 - < 4.18unaffected 6.10.10 - <= 6.10.*unaffected 6.11 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now