CVE-2024-38566

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-38566
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-38566.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-38566
Downstream
Related
Published
2024-06-19T13:35:33.587Z
Modified
2025-11-20T04:59:35.899579Z
Summary
bpf: Fix verifier assumptions about socket->sk
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix verifier assumptions about socket->sk

The verifier assumes that 'sk' field in 'struct socket' is valid and non-NULL when 'socket' pointer itself is trusted and non-NULL. That may not be the case when socket was just created and passed to LSM socket_accept hook. Fix this verifier assumption and adjust tests.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6fcd486b3a0a628c41f12b3a7329a18a2c74b351
Fixed
39f8a29330f433000e716eefc4b9abda05b71a82
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6fcd486b3a0a628c41f12b3a7329a18a2c74b351
Fixed
6f5ae91172a93abac9720ba94edf3ec8f4d7f24f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6fcd486b3a0a628c41f12b3a7329a18a2c74b351
Fixed
c58ccdd2483a1d990748cdaf94206b5d5986a001
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6fcd486b3a0a628c41f12b3a7329a18a2c74b351
Fixed
0db63c0b86e981a1e97d2596d64ceceba1a5470e

Affected versions

v6.*

v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.10
v6.8.11
v6.8.2
v6.8.3
v6.8.4
v6.8.5
v6.8.6
v6.8.7
v6.8.8
v6.8.9
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2

Database specific

vanir_signatures

[
    {
        "id": "CVE-2024-38566-03cadd8b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 803.0,
            "function_hash": "149343152635228081851353430707268569628"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-1068c566",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "check_ptr_to_btf_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 2994.0,
            "function_hash": "320793509880639464480666771355344970433"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-1ab1f8ae",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "115571514967321429506267838252348362123",
                "153810382600586906634120864045299104550",
                "246953112429577927322758074671410531556",
                "206655105806903677000293499644836518283",
                "333800100341218567191773069548698781697",
                "198863282800430541868534220342464585660",
                "36424425859599341081404642487073434241",
                "243844656766750059171741907091000373372",
                "186888603384770764222444300568737444608",
                "225105461984420310733196985237860569192"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-2d379fb1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "211016658753474306742127067237860891883",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "145595150335228974542241635177464097372",
                "302160829755266391447298969702668010962",
                "321736015982632473461117953182826589904",
                "68831706913422934152936017159338217029",
                "228997451779016325946963061472484206981",
                "256338952855869690762258138353301563700",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "313098994643857257336913682802529198391",
                "5852366911306155193493063144734300855",
                "249212957436479430695261376434242935063",
                "228775123335603286458146192717393828675",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "212061375095982944246502807006237691909",
                "240852880011259833525537645849184553136",
                "254072088953283727389928779750098255567",
                "55073234002209330344907550378101105562",
                "281438603103263520824713541232666286734",
                "271998494265315025049571262680625329229",
                "68015279013678822306357896061852268075",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "333410222574480901260933391293932024927",
                "329534199459661694584646740236697566794",
                "6870400644675655964977310978753612271",
                "269713440997487375837115517047214194579"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-3050df20",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "type_is_trusted",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "30930286359314648800747150355174142413"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-31de315f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "mark_btf_ld_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 364.0,
            "function_hash": "292242583666842272437860844138666217062"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-32780a53",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "335464805627553523429680373148833432976",
                "183451088001844727826939329089333282875",
                "48149207602471054086752038899879727051",
                "285752785121370674924591554173117162508",
                "287107313803550511487880016454652637500",
                "259738505107361151140977339332971337853",
                "237320084722506693297605832640578019035"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-36181a6f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "real_bind",
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "length": 344.0,
            "function_hash": "333621734296372369350518434345138436181"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-36ca4559",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "length": 373.0,
            "function_hash": "95479559444490573652785700374295547187"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-3a53d147",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "is_trusted_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 250.0,
            "function_hash": "232224794978431366602167157216363906696"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-3cf22560",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "check_map_kptr_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 1270.0,
            "function_hash": "137090401332406319805092309671099805767"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-3fe3685b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "331324614404273268580369261002501212663",
                "78955722595270032604518343598500927018",
                "153101659486605479940760928043604843972",
                "194372010508284006963823855365511444034",
                "200229222694090491550529310891642495878",
                "200375082322130906301980050743351587521",
                "314652805851420649521200899923060567448",
                "216755707474367339542779780968502714543",
                "171475354500276733939362522692332743879",
                "145983974408190430749684188392432487913",
                "282168587108649890001989024043057108496",
                "215663014995586123950191280689142594530",
                "52582972702604719810060713698434520890",
                "258463879479010684041317808804114015869",
                "175560636797070507846484569381032529121",
                "79572485946326529835067260051239873115",
                "174659032830199349947820976509042303674",
                "199114078596992784403372147786908753690",
                "96059121247500532979196005219339584215",
                "238296592975125328841681258546192718083",
                "237364678454702451517865603596580549026",
                "167708979484771955622606745657997840897",
                "218081664239063974305818065183824092868",
                "92058488793164802546844570264511954134",
                "3164808605359826970640156701459498235",
                "317718772483002601489668067307036122510",
                "62345974896292543388445048014263857618",
                "94680917247437247958776592940542161300",
                "252775180235753392788975711529765127234"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-4387f413",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "mark_btf_ld_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 364.0,
            "function_hash": "292242583666842272437860844138666217062"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-4961a119",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 347.0,
            "function_hash": "157737696723560908881555070572282131005"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-4c5c2e70",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "real_bind",
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "length": 344.0,
            "function_hash": "333621734296372369350518434345138436181"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-4ce157b4",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 803.0,
            "function_hash": "149343152635228081851353430707268569628"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-5320b011",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "115571514967321429506267838252348362123",
                "153810382600586906634120864045299104550",
                "246953112429577927322758074671410531556",
                "206655105806903677000293499644836518283",
                "333800100341218567191773069548698781697",
                "198863282800430541868534220342464585660",
                "36424425859599341081404642487073434241",
                "243844656766750059171741907091000373372",
                "186888603384770764222444300568737444608",
                "225105461984420310733196985237860569192"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-534d93e5",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "335464805627553523429680373148833432976",
                "183451088001844727826939329089333282875",
                "48149207602471054086752038899879727051",
                "285752785121370674924591554173117162508",
                "287107313803550511487880016454652637500",
                "259738505107361151140977339332971337853",
                "237320084722506693297605832640578019035"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-56bbbdf8",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 803.0,
            "function_hash": "149343152635228081851353430707268569628"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-5db75314",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "115571514967321429506267838252348362123",
                "153810382600586906634120864045299104550",
                "246953112429577927322758074671410531556",
                "206655105806903677000293499644836518283",
                "333800100341218567191773069548698781697",
                "198863282800430541868534220342464585660",
                "36424425859599341081404642487073434241",
                "243844656766750059171741907091000373372",
                "186888603384770764222444300568737444608",
                "225105461984420310733196985237860569192"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-6736281b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 347.0,
            "function_hash": "157737696723560908881555070572282131005"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-6bac2064",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "check_ptr_to_btf_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 2994.0,
            "function_hash": "320793509880639464480666771355344970433"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-6f134c06",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "type_is_trusted",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "30930286359314648800747150355174142413"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-7099413f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "real_bind",
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "length": 344.0,
            "function_hash": "333621734296372369350518434345138436181"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-71187316",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "type_is_trusted",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "30930286359314648800747150355174142413"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-71c2c332",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "211016658753474306742127067237860891883",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "145595150335228974542241635177464097372",
                "302160829755266391447298969702668010962",
                "321736015982632473461117953182826589904",
                "68831706913422934152936017159338217029",
                "228997451779016325946963061472484206981",
                "256338952855869690762258138353301563700",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "313098994643857257336913682802529198391",
                "5852366911306155193493063144734300855",
                "249212957436479430695261376434242935063",
                "228775123335603286458146192717393828675",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "212061375095982944246502807006237691909",
                "240852880011259833525537645849184553136",
                "254072088953283727389928779750098255567",
                "55073234002209330344907550378101105562",
                "281438603103263520824713541232666286734",
                "271998494265315025049571262680625329229",
                "68015279013678822306357896061852268075",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "333410222574480901260933391293932024927",
                "329534199459661694584646740236697566794",
                "6870400644675655964977310978753612271",
                "269713440997487375837115517047214194579"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-77e345f2",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "mark_btf_ld_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 364.0,
            "function_hash": "292242583666842272437860844138666217062"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-7df5bb1f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "length": 373.0,
            "function_hash": "95479559444490573652785700374295547187"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-80ea195c",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "is_trusted_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 250.0,
            "function_hash": "232224794978431366602167157216363906696"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-8a024ed7",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "length": 373.0,
            "function_hash": "95479559444490573652785700374295547187"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-94941574",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "real_bind",
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "length": 344.0,
            "function_hash": "333621734296372369350518434345138436181"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-9601abd4",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "function": "check_map_kptr_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 1236.0,
            "function_hash": "206565853147559957542866315087730051099"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-a1ecf1ec",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "is_trusted_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 250.0,
            "function_hash": "232224794978431366602167157216363906696"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-a4dd6a06",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "check_map_kptr_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 1236.0,
            "function_hash": "206565853147559957542866315087730051099"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-a5447283",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "211016658753474306742127067237860891883",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "145595150335228974542241635177464097372",
                "302160829755266391447298969702668010962",
                "321736015982632473461117953182826589904",
                "68831706913422934152936017159338217029",
                "228997451779016325946963061472484206981",
                "256338952855869690762258138353301563700",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "313098994643857257336913682802529198391",
                "5852366911306155193493063144734300855",
                "249212957436479430695261376434242935063",
                "228775123335603286458146192717393828675",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "212061375095982944246502807006237691909",
                "240852880011259833525537645849184553136",
                "254072088953283727389928779750098255567",
                "55073234002209330344907550378101105562",
                "281438603103263520824713541232666286734",
                "271998494265315025049571262680625329229",
                "68015279013678822306357896061852268075",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "333410222574480901260933391293932024927",
                "329534199459661694584646740236697566794",
                "6870400644675655964977310978753612271",
                "269713440997487375837115517047214194579"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-aa11536f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 347.0,
            "function_hash": "157737696723560908881555070572282131005"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-ab624235",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "mark_btf_ld_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 364.0,
            "function_hash": "292242583666842272437860844138666217062"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-b789672f",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "331324614404273268580369261002501212663",
                "78955722595270032604518343598500927018",
                "153101659486605479940760928043604843972",
                "194372010508284006963823855365511444034",
                "256219213297952047791955650497724512615",
                "159903219748435878189621930635995985354",
                "312639188495126220671737296257411947875",
                "216755707474367339542779780968502714543",
                "171475354500276733939362522692332743879",
                "145983974408190430749684188392432487913",
                "282168587108649890001989024043057108496",
                "215663014995586123950191280689142594530",
                "52582972702604719810060713698434520890",
                "258463879479010684041317808804114015869",
                "175560636797070507846484569381032529121",
                "79572485946326529835067260051239873115",
                "174659032830199349947820976509042303674",
                "199114078596992784403372147786908753690",
                "96059121247500532979196005219339584215",
                "238296592975125328841681258546192718083",
                "237364678454702451517865603596580549026",
                "167708979484771955622606745657997840897",
                "218081664239063974305818065183824092868",
                "92058488793164802546844570264511954134",
                "3164808605359826970640156701459498235",
                "317718772483002601489668067307036122510",
                "62345974896292543388445048014263857618",
                "94680917247437247958776592940542161300",
                "252775180235753392788975711529765127234"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-be069421",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 347.0,
            "function_hash": "157737696723560908881555070572282131005"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-bfd53940",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "211016658753474306742127067237860891883",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "145595150335228974542241635177464097372",
                "302160829755266391447298969702668010962",
                "321736015982632473461117953182826589904",
                "68831706913422934152936017159338217029",
                "228997451779016325946963061472484206981",
                "256338952855869690762258138353301563700",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "313098994643857257336913682802529198391",
                "5852366911306155193493063144734300855",
                "249212957436479430695261376434242935063",
                "228775123335603286458146192717393828675",
                "106371211734284087982209798951793423797",
                "21576583655568845650951349260474503261",
                "212061375095982944246502807006237691909",
                "240852880011259833525537645849184553136",
                "254072088953283727389928779750098255567",
                "55073234002209330344907550378101105562",
                "281438603103263520824713541232666286734",
                "271998494265315025049571262680625329229",
                "68015279013678822306357896061852268075",
                "46431376976561209316536107559219648897",
                "94681970775370478308216847197247310010",
                "333410222574480901260933391293932024927",
                "329534199459661694584646740236697566794",
                "6870400644675655964977310978753612271",
                "269713440997487375837115517047214194579"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-c0ba2501",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "335464805627553523429680373148833432976",
                "183451088001844727826939329089333282875",
                "48149207602471054086752038899879727051",
                "285752785121370674924591554173117162508",
                "287107313803550511487880016454652637500",
                "259738505107361151140977339332971337853",
                "237320084722506693297605832640578019035"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-d23dc941",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "331324614404273268580369261002501212663",
                "78955722595270032604518343598500927018",
                "153101659486605479940760928043604843972",
                "194372010508284006963823855365511444034",
                "256219213297952047791955650497724512615",
                "159903219748435878189621930635995985354",
                "312639188495126220671737296257411947875",
                "216755707474367339542779780968502714543",
                "171475354500276733939362522692332743879",
                "145983974408190430749684188392432487913",
                "282168587108649890001989024043057108496",
                "215663014995586123950191280689142594530",
                "52582972702604719810060713698434520890",
                "258463879479010684041317808804114015869",
                "175560636797070507846484569381032529121",
                "79572485946326529835067260051239873115",
                "174659032830199349947820976509042303674",
                "199114078596992784403372147786908753690",
                "96059121247500532979196005219339584215",
                "238296592975125328841681258546192718083",
                "237364678454702451517865603596580549026",
                "167708979484771955622606745657997840897",
                "218081664239063974305818065183824092868",
                "92058488793164802546844570264511954134",
                "3164808605359826970640156701459498235",
                "317718772483002601489668067307036122510",
                "62345974896292543388445048014263857618",
                "94680917247437247958776592940542161300",
                "252775180235753392788975711529765127234"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-d3652d08",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "check_ptr_to_btf_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 2963.0,
            "function_hash": "51889001619753983726516444051513207091"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-d51c2bae",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "115571514967321429506267838252348362123",
                "153810382600586906634120864045299104550",
                "246953112429577927322758074671410531556",
                "206655105806903677000293499644836518283",
                "333800100341218567191773069548698781697",
                "198863282800430541868534220342464585660",
                "36424425859599341081404642487073434241",
                "243844656766750059171741907091000373372",
                "186888603384770764222444300568737444608",
                "225105461984420310733196985237860569192"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-dccb688d",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "335464805627553523429680373148833432976",
                "183451088001844727826939329089333282875",
                "48149207602471054086752038899879727051",
                "285752785121370674924591554173117162508",
                "287107313803550511487880016454652637500",
                "259738505107361151140977339332971337853",
                "237320084722506693297605832640578019035"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-e0c046d5",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
        "signature_version": "v1",
        "target": {
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "331324614404273268580369261002501212663",
                "78955722595270032604518343598500927018",
                "153101659486605479940760928043604843972",
                "194372010508284006963823855365511444034",
                "256219213297952047791955650497724512615",
                "159903219748435878189621930635995985354",
                "312639188495126220671737296257411947875",
                "216755707474367339542779780968502714543",
                "171475354500276733939362522692332743879",
                "145983974408190430749684188392432487913",
                "282168587108649890001989024043057108496",
                "215663014995586123950191280689142594530",
                "52582972702604719810060713698434520890",
                "258463879479010684041317808804114015869",
                "175560636797070507846484569381032529121",
                "79572485946326529835067260051239873115",
                "174659032830199349947820976509042303674",
                "199114078596992784403372147786908753690",
                "96059121247500532979196005219339584215",
                "238296592975125328841681258546192718083",
                "237364678454702451517865603596580549026",
                "167708979484771955622606745657997840897",
                "218081664239063974305818065183824092868",
                "92058488793164802546844570264511954134",
                "3164808605359826970640156701459498235",
                "317718772483002601489668067307036122510",
                "62345974896292543388445048014263857618",
                "94680917247437247958776592940542161300",
                "252775180235753392788975711529765127234"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "id": "CVE-2024-38566-e6df430d",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "check_ptr_to_btf_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 2994.0,
            "function_hash": "320793509880639464480666771355344970433"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-e803d3de",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/local_storage.c"
        },
        "deprecated": false,
        "digest": {
            "length": 803.0,
            "function_hash": "149343152635228081851353430707268569628"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-e95aac1d",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
        "signature_version": "v1",
        "target": {
            "function": "check_map_kptr_access",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 1236.0,
            "function_hash": "206565853147559957542866315087730051099"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-fa48d783",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
        "signature_version": "v1",
        "target": {
            "function": "BPF_PROG",
            "file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
        },
        "deprecated": false,
        "digest": {
            "length": 373.0,
            "function_hash": "95479559444490573652785700374295547187"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-fa9c84ae",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "is_trusted_reg",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 250.0,
            "function_hash": "232224794978431366602167157216363906696"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2024-38566-fe86e36a",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
        "signature_version": "v1",
        "target": {
            "function": "type_is_trusted",
            "file": "kernel/bpf/verifier.c"
        },
        "deprecated": false,
        "digest": {
            "length": 554.0,
            "function_hash": "30930286359314648800747150355174142413"
        },
        "signature_type": "Function"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.4.0
Fixed
6.6.33
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.12
Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.9.3