In the Linux kernel, the following vulnerability has been resolved:
bpf: Take return from setmemoryro() into account with bpfproglock_ro()
setmemoryro() can fail, leaving memory unprotected.
Check its return and take it into account as an error.
{ "vanir_signatures": [ { "deprecated": false, "signature_type": "Function", "target": { "file": "include/linux/filter.h", "function": "bpf_prog_lock_ro" }, "signature_version": "v1", "digest": { "length": 198.0, "function_hash": "19480910236389850831529224816477946824" }, "id": "CVE-2024-42068-074e3549", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a359696856ca9409fb97655c5a8ef0f549cb6e03" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/verifier.c", "function": "jit_subprogs" }, "signature_version": "v1", "digest": { "length": 6123.0, "function_hash": "285369557763290228681856008271746248928" }, "id": "CVE-2024-42068-0fe09961", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2cc63eca0c993c99d18893214abf8f85d566d8" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "include/linux/filter.h", "function": "bpf_prog_lock_ro" }, "signature_version": "v1", "digest": { "length": 198.0, "function_hash": "19480910236389850831529224816477946824" }, "id": "CVE-2024-42068-1032e458", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2cc63eca0c993c99d18893214abf8f85d566d8" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/verifier.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "57956260171259865725393233048863311735", "224977075405181377516888005523805536468", "97239354903719869253564016941299935714", "181088007389086389575238100182498197920", "210761305296273747826061106617006452737", "216092155975371133674378212228593915987" ], "threshold": 0.9 }, "id": "CVE-2024-42068-1d11628f", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4f602e3ff749ba770bf8ff10196e18358de6720" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/core.c", "function": "bpf_prog_select_runtime" }, "signature_version": "v1", "digest": { "length": 587.0, "function_hash": "102001823444256688150702540238928697368" }, "id": "CVE-2024-42068-348ed41b", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05412471beba313ecded95aa17b25fe84bb2551a" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/core.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "319774769146804815112709854218893032999", "268336963190718386750950011544333868378", "61647066274487332845239471702337414011", "337329800227344140609652046848321736134" ], "threshold": 0.9 }, "id": "CVE-2024-42068-3c011abc", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05412471beba313ecded95aa17b25fe84bb2551a" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "include/linux/filter.h" }, "signature_version": "v1", "digest": { "line_hashes": [ "171392386463766645413676844825406838337", "115078710782320501544084212852742229784", "173325921619927838149590330871884424690", "220595240557167124263571762669235290475", "33383348749447928975006836560377444689", "126105751034856253523569988606111445860", "224859627482308319213209482697385286145", "22144742711631829422006294289397572896", "227960453970075764999553251268996875285", "224191342810417070186036302818659933438", "37580343183611142674426083556663633479" ], "threshold": 0.9 }, "id": "CVE-2024-42068-3cfd0d36", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a359696856ca9409fb97655c5a8ef0f549cb6e03" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/core.c", "function": "bpf_prog_select_runtime" }, "signature_version": "v1", "digest": { "length": 587.0, "function_hash": "102001823444256688150702540238928697368" }, "id": "CVE-2024-42068-4aeb8ade", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a359696856ca9409fb97655c5a8ef0f549cb6e03" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "include/linux/filter.h" }, "signature_version": "v1", "digest": { "line_hashes": [ "171392386463766645413676844825406838337", "115078710782320501544084212852742229784", "173325921619927838149590330871884424690", "220595240557167124263571762669235290475", "33383348749447928975006836560377444689", "126105751034856253523569988606111445860", "224859627482308319213209482697385286145", "22144742711631829422006294289397572896", "227960453970075764999553251268996875285", "224191342810417070186036302818659933438", "37580343183611142674426083556663633479" ], "threshold": 0.9 }, "id": "CVE-2024-42068-5272825a", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05412471beba313ecded95aa17b25fe84bb2551a" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/core.c", "function": "bpf_prog_select_runtime" }, "signature_version": "v1", "digest": { "length": 587.0, "function_hash": "102001823444256688150702540238928697368" }, "id": "CVE-2024-42068-52f75586", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4f602e3ff749ba770bf8ff10196e18358de6720" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "include/linux/filter.h" }, "signature_version": "v1", "digest": { "line_hashes": [ "171392386463766645413676844825406838337", "115078710782320501544084212852742229784", "173325921619927838149590330871884424690", "220595240557167124263571762669235290475", "33383348749447928975006836560377444689", "126105751034856253523569988606111445860", "224859627482308319213209482697385286145", "22144742711631829422006294289397572896", "227960453970075764999553251268996875285", "224191342810417070186036302818659933438", "37580343183611142674426083556663633479" ], "threshold": 0.9 }, "id": "CVE-2024-42068-6cad2a84", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4f602e3ff749ba770bf8ff10196e18358de6720" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "include/linux/filter.h", "function": "bpf_prog_lock_ro" }, "signature_version": "v1", "digest": { "length": 198.0, "function_hash": "19480910236389850831529224816477946824" }, "id": "CVE-2024-42068-732284c3", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4f602e3ff749ba770bf8ff10196e18358de6720" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/verifier.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "57956260171259865725393233048863311735", "224977075405181377516888005523805536468", "97239354903719869253564016941299935714", "181088007389086389575238100182498197920", "210761305296273747826061106617006452737", "216092155975371133674378212228593915987" ], "threshold": 0.9 }, "id": "CVE-2024-42068-88e5bf85", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05412471beba313ecded95aa17b25fe84bb2551a" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "include/linux/filter.h", "function": "bpf_prog_lock_ro" }, "signature_version": "v1", "digest": { "length": 198.0, "function_hash": "19480910236389850831529224816477946824" }, "id": "CVE-2024-42068-a3fdee94", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05412471beba313ecded95aa17b25fe84bb2551a" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/verifier.c", "function": "jit_subprogs" }, "signature_version": "v1", "digest": { "length": 6077.0, "function_hash": "145022811902296545491719530244842187411" }, "id": "CVE-2024-42068-acb29254", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@05412471beba313ecded95aa17b25fe84bb2551a" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/verifier.c", "function": "jit_subprogs" }, "signature_version": "v1", "digest": { "length": 5074.0, "function_hash": "210546278663531769734719410333058756946" }, "id": "CVE-2024-42068-ad03eac4", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a359696856ca9409fb97655c5a8ef0f549cb6e03" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/core.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "319774769146804815112709854218893032999", "268336963190718386750950011544333868378", "61647066274487332845239471702337414011", "337329800227344140609652046848321736134" ], "threshold": 0.9 }, "id": "CVE-2024-42068-aeb78a7e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a359696856ca9409fb97655c5a8ef0f549cb6e03" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/verifier.c", "function": "jit_subprogs" }, "signature_version": "v1", "digest": { "length": 5264.0, "function_hash": "241281168526422563953838957176584362748" }, "id": "CVE-2024-42068-b2138b52", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4f602e3ff749ba770bf8ff10196e18358de6720" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/core.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "319774769146804815112709854218893032999", "268336963190718386750950011544333868378", "61647066274487332845239471702337414011", "337329800227344140609652046848321736134" ], "threshold": 0.9 }, "id": "CVE-2024-42068-cc49168c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e4f602e3ff749ba770bf8ff10196e18358de6720" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/verifier.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "57956260171259865725393233048863311735", "224977075405181377516888005523805536468", "97239354903719869253564016941299935714", "181088007389086389575238100182498197920", "210761305296273747826061106617006452737", "216092155975371133674378212228593915987" ], "threshold": 0.9 }, "id": "CVE-2024-42068-ceb07d18", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2cc63eca0c993c99d18893214abf8f85d566d8" }, { "deprecated": false, "signature_type": "Function", "target": { "file": "kernel/bpf/core.c", "function": "bpf_prog_select_runtime" }, "signature_version": "v1", "digest": { "length": 587.0, "function_hash": "102001823444256688150702540238928697368" }, "id": "CVE-2024-42068-d8d537de", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2cc63eca0c993c99d18893214abf8f85d566d8" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "include/linux/filter.h" }, "signature_version": "v1", "digest": { "line_hashes": [ "171392386463766645413676844825406838337", "115078710782320501544084212852742229784", "173325921619927838149590330871884424690", "220595240557167124263571762669235290475", "33383348749447928975006836560377444689", "126105751034856253523569988606111445860", "224859627482308319213209482697385286145", "22144742711631829422006294289397572896", "227960453970075764999553251268996875285", "224191342810417070186036302818659933438", "37580343183611142674426083556663633479" ], "threshold": 0.9 }, "id": "CVE-2024-42068-dbeea1cd", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2cc63eca0c993c99d18893214abf8f85d566d8" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/core.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "319774769146804815112709854218893032999", "268336963190718386750950011544333868378", "61647066274487332845239471702337414011", "337329800227344140609652046848321736134" ], "threshold": 0.9 }, "id": "CVE-2024-42068-ef55db7e", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7d2cc63eca0c993c99d18893214abf8f85d566d8" }, { "deprecated": false, "signature_type": "Line", "target": { "file": "kernel/bpf/verifier.c" }, "signature_version": "v1", "digest": { "line_hashes": [ "57956260171259865725393233048863311735", "224977075405181377516888005523805536468", "97239354903719869253564016941299935714", "181088007389086389575238100182498197920", "210761305296273747826061106617006452737", "216092155975371133674378212228593915987" ], "threshold": 0.9 }, "id": "CVE-2024-42068-efe82211", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a359696856ca9409fb97655c5a8ef0f549cb6e03" } ] }