In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix verifier assumptions about socket->sk
The verifier assumes that 'sk' field in 'struct socket' is valid and non-NULL when 'socket' pointer itself is trusted and non-NULL. That may not be the case when socket was just created and passed to LSM socket_accept hook. Fix this verifier assumption and adjust tests.
[
{
"id": "CVE-2024-38566-03cadd8b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 803.0,
"function_hash": "149343152635228081851353430707268569628"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-1068c566",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "check_ptr_to_btf_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 2994.0,
"function_hash": "320793509880639464480666771355344970433"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-1ab1f8ae",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"115571514967321429506267838252348362123",
"153810382600586906634120864045299104550",
"246953112429577927322758074671410531556",
"206655105806903677000293499644836518283",
"333800100341218567191773069548698781697",
"198863282800430541868534220342464585660",
"36424425859599341081404642487073434241",
"243844656766750059171741907091000373372",
"186888603384770764222444300568737444608",
"225105461984420310733196985237860569192"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-2d379fb1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"211016658753474306742127067237860891883",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"145595150335228974542241635177464097372",
"302160829755266391447298969702668010962",
"321736015982632473461117953182826589904",
"68831706913422934152936017159338217029",
"228997451779016325946963061472484206981",
"256338952855869690762258138353301563700",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"313098994643857257336913682802529198391",
"5852366911306155193493063144734300855",
"249212957436479430695261376434242935063",
"228775123335603286458146192717393828675",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"212061375095982944246502807006237691909",
"240852880011259833525537645849184553136",
"254072088953283727389928779750098255567",
"55073234002209330344907550378101105562",
"281438603103263520824713541232666286734",
"271998494265315025049571262680625329229",
"68015279013678822306357896061852268075",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"333410222574480901260933391293932024927",
"329534199459661694584646740236697566794",
"6870400644675655964977310978753612271",
"269713440997487375837115517047214194579"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-3050df20",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "type_is_trusted",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 554.0,
"function_hash": "30930286359314648800747150355174142413"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-31de315f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "mark_btf_ld_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 364.0,
"function_hash": "292242583666842272437860844138666217062"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-32780a53",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"335464805627553523429680373148833432976",
"183451088001844727826939329089333282875",
"48149207602471054086752038899879727051",
"285752785121370674924591554173117162508",
"287107313803550511487880016454652637500",
"259738505107361151140977339332971337853",
"237320084722506693297605832640578019035"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-36181a6f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "real_bind",
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"length": 344.0,
"function_hash": "333621734296372369350518434345138436181"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-36ca4559",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"length": 373.0,
"function_hash": "95479559444490573652785700374295547187"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-3a53d147",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "is_trusted_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 250.0,
"function_hash": "232224794978431366602167157216363906696"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-3cf22560",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "check_map_kptr_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 1270.0,
"function_hash": "137090401332406319805092309671099805767"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-3fe3685b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"331324614404273268580369261002501212663",
"78955722595270032604518343598500927018",
"153101659486605479940760928043604843972",
"194372010508284006963823855365511444034",
"200229222694090491550529310891642495878",
"200375082322130906301980050743351587521",
"314652805851420649521200899923060567448",
"216755707474367339542779780968502714543",
"171475354500276733939362522692332743879",
"145983974408190430749684188392432487913",
"282168587108649890001989024043057108496",
"215663014995586123950191280689142594530",
"52582972702604719810060713698434520890",
"258463879479010684041317808804114015869",
"175560636797070507846484569381032529121",
"79572485946326529835067260051239873115",
"174659032830199349947820976509042303674",
"199114078596992784403372147786908753690",
"96059121247500532979196005219339584215",
"238296592975125328841681258546192718083",
"237364678454702451517865603596580549026",
"167708979484771955622606745657997840897",
"218081664239063974305818065183824092868",
"92058488793164802546844570264511954134",
"3164808605359826970640156701459498235",
"317718772483002601489668067307036122510",
"62345974896292543388445048014263857618",
"94680917247437247958776592940542161300",
"252775180235753392788975711529765127234"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-4387f413",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "mark_btf_ld_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 364.0,
"function_hash": "292242583666842272437860844138666217062"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-4961a119",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "157737696723560908881555070572282131005"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-4c5c2e70",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "real_bind",
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"length": 344.0,
"function_hash": "333621734296372369350518434345138436181"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-4ce157b4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 803.0,
"function_hash": "149343152635228081851353430707268569628"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-5320b011",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"115571514967321429506267838252348362123",
"153810382600586906634120864045299104550",
"246953112429577927322758074671410531556",
"206655105806903677000293499644836518283",
"333800100341218567191773069548698781697",
"198863282800430541868534220342464585660",
"36424425859599341081404642487073434241",
"243844656766750059171741907091000373372",
"186888603384770764222444300568737444608",
"225105461984420310733196985237860569192"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-534d93e5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"335464805627553523429680373148833432976",
"183451088001844727826939329089333282875",
"48149207602471054086752038899879727051",
"285752785121370674924591554173117162508",
"287107313803550511487880016454652637500",
"259738505107361151140977339332971337853",
"237320084722506693297605832640578019035"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-56bbbdf8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 803.0,
"function_hash": "149343152635228081851353430707268569628"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-5db75314",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"115571514967321429506267838252348362123",
"153810382600586906634120864045299104550",
"246953112429577927322758074671410531556",
"206655105806903677000293499644836518283",
"333800100341218567191773069548698781697",
"198863282800430541868534220342464585660",
"36424425859599341081404642487073434241",
"243844656766750059171741907091000373372",
"186888603384770764222444300568737444608",
"225105461984420310733196985237860569192"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-6736281b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "157737696723560908881555070572282131005"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-6bac2064",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "check_ptr_to_btf_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 2994.0,
"function_hash": "320793509880639464480666771355344970433"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-6f134c06",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "type_is_trusted",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 554.0,
"function_hash": "30930286359314648800747150355174142413"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-7099413f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "real_bind",
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"length": 344.0,
"function_hash": "333621734296372369350518434345138436181"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-71187316",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "type_is_trusted",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 554.0,
"function_hash": "30930286359314648800747150355174142413"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-71c2c332",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"211016658753474306742127067237860891883",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"145595150335228974542241635177464097372",
"302160829755266391447298969702668010962",
"321736015982632473461117953182826589904",
"68831706913422934152936017159338217029",
"228997451779016325946963061472484206981",
"256338952855869690762258138353301563700",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"313098994643857257336913682802529198391",
"5852366911306155193493063144734300855",
"249212957436479430695261376434242935063",
"228775123335603286458146192717393828675",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"212061375095982944246502807006237691909",
"240852880011259833525537645849184553136",
"254072088953283727389928779750098255567",
"55073234002209330344907550378101105562",
"281438603103263520824713541232666286734",
"271998494265315025049571262680625329229",
"68015279013678822306357896061852268075",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"333410222574480901260933391293932024927",
"329534199459661694584646740236697566794",
"6870400644675655964977310978753612271",
"269713440997487375837115517047214194579"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-77e345f2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "mark_btf_ld_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 364.0,
"function_hash": "292242583666842272437860844138666217062"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-7df5bb1f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"length": 373.0,
"function_hash": "95479559444490573652785700374295547187"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-80ea195c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "is_trusted_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 250.0,
"function_hash": "232224794978431366602167157216363906696"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-8a024ed7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"length": 373.0,
"function_hash": "95479559444490573652785700374295547187"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-94941574",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "real_bind",
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"length": 344.0,
"function_hash": "333621734296372369350518434345138436181"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-9601abd4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"function": "check_map_kptr_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 1236.0,
"function_hash": "206565853147559957542866315087730051099"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-a1ecf1ec",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "is_trusted_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 250.0,
"function_hash": "232224794978431366602167157216363906696"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-a4dd6a06",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "check_map_kptr_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 1236.0,
"function_hash": "206565853147559957542866315087730051099"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-a5447283",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"211016658753474306742127067237860891883",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"145595150335228974542241635177464097372",
"302160829755266391447298969702668010962",
"321736015982632473461117953182826589904",
"68831706913422934152936017159338217029",
"228997451779016325946963061472484206981",
"256338952855869690762258138353301563700",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"313098994643857257336913682802529198391",
"5852366911306155193493063144734300855",
"249212957436479430695261376434242935063",
"228775123335603286458146192717393828675",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"212061375095982944246502807006237691909",
"240852880011259833525537645849184553136",
"254072088953283727389928779750098255567",
"55073234002209330344907550378101105562",
"281438603103263520824713541232666286734",
"271998494265315025049571262680625329229",
"68015279013678822306357896061852268075",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"333410222574480901260933391293932024927",
"329534199459661694584646740236697566794",
"6870400644675655964977310978753612271",
"269713440997487375837115517047214194579"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-aa11536f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "157737696723560908881555070572282131005"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-ab624235",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "mark_btf_ld_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 364.0,
"function_hash": "292242583666842272437860844138666217062"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-b789672f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"331324614404273268580369261002501212663",
"78955722595270032604518343598500927018",
"153101659486605479940760928043604843972",
"194372010508284006963823855365511444034",
"256219213297952047791955650497724512615",
"159903219748435878189621930635995985354",
"312639188495126220671737296257411947875",
"216755707474367339542779780968502714543",
"171475354500276733939362522692332743879",
"145983974408190430749684188392432487913",
"282168587108649890001989024043057108496",
"215663014995586123950191280689142594530",
"52582972702604719810060713698434520890",
"258463879479010684041317808804114015869",
"175560636797070507846484569381032529121",
"79572485946326529835067260051239873115",
"174659032830199349947820976509042303674",
"199114078596992784403372147786908753690",
"96059121247500532979196005219339584215",
"238296592975125328841681258546192718083",
"237364678454702451517865603596580549026",
"167708979484771955622606745657997840897",
"218081664239063974305818065183824092868",
"92058488793164802546844570264511954134",
"3164808605359826970640156701459498235",
"317718772483002601489668067307036122510",
"62345974896292543388445048014263857618",
"94680917247437247958776592940542161300",
"252775180235753392788975711529765127234"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-be069421",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 347.0,
"function_hash": "157737696723560908881555070572282131005"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-bfd53940",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"211016658753474306742127067237860891883",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"145595150335228974542241635177464097372",
"302160829755266391447298969702668010962",
"321736015982632473461117953182826589904",
"68831706913422934152936017159338217029",
"228997451779016325946963061472484206981",
"256338952855869690762258138353301563700",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"313098994643857257336913682802529198391",
"5852366911306155193493063144734300855",
"249212957436479430695261376434242935063",
"228775123335603286458146192717393828675",
"106371211734284087982209798951793423797",
"21576583655568845650951349260474503261",
"212061375095982944246502807006237691909",
"240852880011259833525537645849184553136",
"254072088953283727389928779750098255567",
"55073234002209330344907550378101105562",
"281438603103263520824713541232666286734",
"271998494265315025049571262680625329229",
"68015279013678822306357896061852268075",
"46431376976561209316536107559219648897",
"94681970775370478308216847197247310010",
"333410222574480901260933391293932024927",
"329534199459661694584646740236697566794",
"6870400644675655964977310978753612271",
"269713440997487375837115517047214194579"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-c0ba2501",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"335464805627553523429680373148833432976",
"183451088001844727826939329089333282875",
"48149207602471054086752038899879727051",
"285752785121370674924591554173117162508",
"287107313803550511487880016454652637500",
"259738505107361151140977339332971337853",
"237320084722506693297605832640578019035"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-d23dc941",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"331324614404273268580369261002501212663",
"78955722595270032604518343598500927018",
"153101659486605479940760928043604843972",
"194372010508284006963823855365511444034",
"256219213297952047791955650497724512615",
"159903219748435878189621930635995985354",
"312639188495126220671737296257411947875",
"216755707474367339542779780968502714543",
"171475354500276733939362522692332743879",
"145983974408190430749684188392432487913",
"282168587108649890001989024043057108496",
"215663014995586123950191280689142594530",
"52582972702604719810060713698434520890",
"258463879479010684041317808804114015869",
"175560636797070507846484569381032529121",
"79572485946326529835067260051239873115",
"174659032830199349947820976509042303674",
"199114078596992784403372147786908753690",
"96059121247500532979196005219339584215",
"238296592975125328841681258546192718083",
"237364678454702451517865603596580549026",
"167708979484771955622606745657997840897",
"218081664239063974305818065183824092868",
"92058488793164802546844570264511954134",
"3164808605359826970640156701459498235",
"317718772483002601489668067307036122510",
"62345974896292543388445048014263857618",
"94680917247437247958776592940542161300",
"252775180235753392788975711529765127234"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-d3652d08",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "check_ptr_to_btf_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 2963.0,
"function_hash": "51889001619753983726516444051513207091"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-d51c2bae",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"115571514967321429506267838252348362123",
"153810382600586906634120864045299104550",
"246953112429577927322758074671410531556",
"206655105806903677000293499644836518283",
"333800100341218567191773069548698781697",
"198863282800430541868534220342464585660",
"36424425859599341081404642487073434241",
"243844656766750059171741907091000373372",
"186888603384770764222444300568737444608",
"225105461984420310733196985237860569192"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-dccb688d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"file": "tools/testing/selftests/bpf/progs/lsm_cgroup.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"335464805627553523429680373148833432976",
"183451088001844727826939329089333282875",
"48149207602471054086752038899879727051",
"285752785121370674924591554173117162508",
"287107313803550511487880016454652637500",
"259738505107361151140977339332971337853",
"237320084722506693297605832640578019035"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-e0c046d5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c58ccdd2483a1d990748cdaf94206b5d5986a001",
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"331324614404273268580369261002501212663",
"78955722595270032604518343598500927018",
"153101659486605479940760928043604843972",
"194372010508284006963823855365511444034",
"256219213297952047791955650497724512615",
"159903219748435878189621930635995985354",
"312639188495126220671737296257411947875",
"216755707474367339542779780968502714543",
"171475354500276733939362522692332743879",
"145983974408190430749684188392432487913",
"282168587108649890001989024043057108496",
"215663014995586123950191280689142594530",
"52582972702604719810060713698434520890",
"258463879479010684041317808804114015869",
"175560636797070507846484569381032529121",
"79572485946326529835067260051239873115",
"174659032830199349947820976509042303674",
"199114078596992784403372147786908753690",
"96059121247500532979196005219339584215",
"238296592975125328841681258546192718083",
"237364678454702451517865603596580549026",
"167708979484771955622606745657997840897",
"218081664239063974305818065183824092868",
"92058488793164802546844570264511954134",
"3164808605359826970640156701459498235",
"317718772483002601489668067307036122510",
"62345974896292543388445048014263857618",
"94680917247437247958776592940542161300",
"252775180235753392788975711529765127234"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-38566-e6df430d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "check_ptr_to_btf_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 2994.0,
"function_hash": "320793509880639464480666771355344970433"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-e803d3de",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/local_storage.c"
},
"deprecated": false,
"digest": {
"length": 803.0,
"function_hash": "149343152635228081851353430707268569628"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-e95aac1d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0db63c0b86e981a1e97d2596d64ceceba1a5470e",
"signature_version": "v1",
"target": {
"function": "check_map_kptr_access",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 1236.0,
"function_hash": "206565853147559957542866315087730051099"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-fa48d783",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@39f8a29330f433000e716eefc4b9abda05b71a82",
"signature_version": "v1",
"target": {
"function": "BPF_PROG",
"file": "tools/testing/selftests/bpf/progs/bench_local_storage_create.c"
},
"deprecated": false,
"digest": {
"length": 373.0,
"function_hash": "95479559444490573652785700374295547187"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-fa9c84ae",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "is_trusted_reg",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 250.0,
"function_hash": "232224794978431366602167157216363906696"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-38566-fe86e36a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6f5ae91172a93abac9720ba94edf3ec8f4d7f24f",
"signature_version": "v1",
"target": {
"function": "type_is_trusted",
"file": "kernel/bpf/verifier.c"
},
"deprecated": false,
"digest": {
"length": 554.0,
"function_hash": "30930286359314648800747150355174142413"
},
"signature_type": "Function"
}
]