In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix overloading of MEM_UNINIT's meaning
Lonial reported an issue in the BPF verifier where checkmemsize_reg() has the following code:
if (!tnum_is_const(reg->var_off))
/* For unprivileged variable accesses, disable raw
* mode so that the program is required to
* initialize all the memory that the helper could
* just partially fill up.
*/
meta = NULL;
This means that writes are not checked when the register containing the size of the passed buffer has not a fixed size. Through this bug, a BPF program can write to a map which is marked as read-only, for example, .rodata global maps.
The problem is that MEMUNINIT's initial meaning that "the passed buffer to the BPF helper does not need to be initialized" which was added back in commit 435faee1aae9 ("bpf, verifier: add ARGPTRTORAW_STACK type") got overloaded over time with "the passed buffer is being written to".
The problem however is that checks such as the above which were added later via 06c1c049721a ("bpf: allow helpers access to variable memory") set meta to NULL in order force the user to always initialize the passed buffer to the helper. Due to the current double meaning of MEM_UNINIT, this bypasses verifier write checks to the memory (not boundary checks though) and only assumes the latter memory is read instead.
Fix this by reverting MEMUNINIT back to its original meaning, and having MEMWRITE as an annotation to BPF helpers in order to then trigger the BPF verifier checks for writing to memory.
Some notes: checkargpairok() ensures that for ARGCONSTSIZE{,ORZERO} we can access fn->argtype[arg - 1] since it must contain a preceding ARGPTRTOMEM. For checkmemreg() the meta argument can be removed altogether since we do check both BPFREAD and BPFWRITE. Same for the equivalent checkkfuncmemsize_reg().
[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_helper_mem_access"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54bc31682660810af1bed7ca7a19f182df8d3df8",
"digest": {
"length": 2272.0,
"function_hash": "54178007441229277445088851915125657521"
},
"id": "CVE-2024-50164-02f91238"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54bc31682660810af1bed7ca7a19f182df8d3df8",
"digest": {
"length": 483.0,
"function_hash": "241315833068523644509038366956419670520"
},
"id": "CVE-2024-50164-03e8395f"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_func_arg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43f4df339a4d375bedcad29a61ae6f0ee7a048f8",
"digest": {
"length": 6501.0,
"function_hash": "298984027086749036294159667791097517809"
},
"id": "CVE-2024-50164-158897d9"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54bc31682660810af1bed7ca7a19f182df8d3df8",
"digest": {
"line_hashes": [
"123064702207162602641105588423472751038",
"325337278585477448330318555233934966315",
"134440557492818957157517776126813193075",
"281912075887344794344496850893734340998",
"307817570428369981854494852509465050680",
"150347989427477849440022991935349446984",
"3465630489724265759948224559126723233",
"85056965182783872610494439235675288361",
"186493382727667977905002381632646728509",
"99040451780041560663194905358855935253",
"293367263442070690470111990539756566288",
"101962800551801882160217789840767150469",
"227343777401955317729514434338326970795",
"98113112911473925393761848959530322417",
"50005083473690967984536684391090991068",
"268628238659231130002086002885746182556",
"82305563139147309493333646948330685743",
"76427002125123609454187095621811657289",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"183841676480671357479799493952353960839",
"141897936446770188312245190792289787624",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"105970117886595635337052237897296646235",
"269544455276885078645675948380991066652",
"87904475457761605244823000217063906823",
"39676461690149922226256473698937205150",
"181465546388732355436992391600378552576",
"169019858900646065474293927378238551897",
"30766719663430059980616966876512827344",
"158053972082671421657949380836439480820",
"54597593806531385750996849696668410041",
"293583054751936198791442818186776674705",
"183598514484845210441149438640835686789",
"217776216541192143148969303213657759596",
"131364144910350037634260475747022602203",
"134097024736294149914501846642394602626",
"93330013648008039761797855334076596985",
"4807715628505579607170903978310907010",
"332373746259226487943675812014198402001",
"216947035821153618574370930070742298934",
"321022405432660062313640279114921902136",
"267896469578827979369867413473337429823",
"139051887183020180100851840052191230954",
"141797842917227928625562124471431465572",
"31643827321822277701851474137868706364",
"19303660516117662534224753192652097407",
"171263581861414301828577254149632442936",
"191216596991804568284478373389200001273",
"74727924725289673170088899863697303704",
"271610233844069635315918008387269948471",
"84371680014248532890931455022258196052",
"16856241298506851931499148406673624405",
"120861825139295321369640718799758660992",
"267944960732863593506007591762368271195",
"175173568929711584570061678292938490317",
"266002229650915655144415318592226932580",
"210563333413674368282733822540140348416",
"16593695270904553604931203735431565012",
"181099604051074799596384976418487657890",
"56492892501836191695829787847471487028",
"47666578413201524430852664042458779122",
"33545593860395841216050872915181342976",
"10022731002592206959717643183175547241",
"27103237588050940549076401224506076086",
"56993239768789620452827161768406332175",
"183185042111761554106900416157919824214",
"249035046499852188439280346374529781200",
"147014555070141035591684957211823376936",
"292868663553564634587357386109234347740",
"267138341291960925141237539409002668162",
"129357614377728138086437361763012085851",
"269943171208947518112515930137646787530",
"85840540550888281096266141805660628586",
"196862198923577110871713745353557369920",
"163869468792151159565326138735167914603",
"59845430094799004585147801209723030096",
"14651397484013066134304585337091623032",
"8660133689539268432318977867941631271",
"154693885715247979263308555618677027431",
"102703634064981422275636922539006253313",
"10598102454458177573942042225839769770",
"173433640390431781676872720328323293956",
"3320512929015196041748048384395320022",
"88813494379228328197503879193964122137",
"179214258769110530901234814609273165510",
"58704135924637798103955502127780748692",
"312773608601132582551218268227985888109",
"142609568019290574457125430884062025990",
"257818094117558644833483363512677799256"
],
"threshold": 0.9
},
"id": "CVE-2024-50164-2c5ec99f"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_kfunc_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43f4df339a4d375bedcad29a61ae6f0ee7a048f8",
"digest": {
"length": 522.0,
"function_hash": "139269613388472041146412999333044411279"
},
"id": "CVE-2024-50164-425514db"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_kfunc_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ea607330a39184f51737c6ae706db7fdca7628e",
"digest": {
"length": 529.0,
"function_hash": "319525126687825767474003285704360236522"
},
"id": "CVE-2024-50164-45350264"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48068ccaea957469f1adf78dfd2c1c9a7e18f0fe",
"digest": {
"length": 476.0,
"function_hash": "192202227537863871617848563453832961708"
},
"id": "CVE-2024-50164-59b74b66"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_kfunc_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48068ccaea957469f1adf78dfd2c1c9a7e18f0fe",
"digest": {
"length": 529.0,
"function_hash": "319525126687825767474003285704360236522"
},
"id": "CVE-2024-50164-5b05fb2f"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ea607330a39184f51737c6ae706db7fdca7628e",
"digest": {
"length": 871.0,
"function_hash": "201660618489984045611542153104627860655"
},
"id": "CVE-2024-50164-64cb94bc"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_func_arg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48068ccaea957469f1adf78dfd2c1c9a7e18f0fe",
"digest": {
"length": 5991.0,
"function_hash": "226603987513645776076542353786954753482"
},
"id": "CVE-2024-50164-85c23fcf"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43f4df339a4d375bedcad29a61ae6f0ee7a048f8",
"digest": {
"length": 801.0,
"function_hash": "167960906274619216269889084911649596778"
},
"id": "CVE-2024-50164-894e4e22"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54bc31682660810af1bed7ca7a19f182df8d3df8",
"digest": {
"length": 871.0,
"function_hash": "201660618489984045611542153104627860655"
},
"id": "CVE-2024-50164-8c19eeda"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43f4df339a4d375bedcad29a61ae6f0ee7a048f8",
"digest": {
"length": 476.0,
"function_hash": "192202227537863871617848563453832961708"
},
"id": "CVE-2024-50164-8d6ba5fd"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ea607330a39184f51737c6ae706db7fdca7628e",
"digest": {
"line_hashes": [
"123064702207162602641105588423472751038",
"325337278585477448330318555233934966315",
"134440557492818957157517776126813193075",
"281912075887344794344496850893734340998",
"307817570428369981854494852509465050680",
"150347989427477849440022991935349446984",
"3465630489724265759948224559126723233",
"85056965182783872610494439235675288361",
"186493382727667977905002381632646728509",
"99040451780041560663194905358855935253",
"293367263442070690470111990539756566288",
"101962800551801882160217789840767150469",
"227343777401955317729514434338326970795",
"98113112911473925393761848959530322417",
"50005083473690967984536684391090991068",
"268628238659231130002086002885746182556",
"82305563139147309493333646948330685743",
"76427002125123609454187095621811657289",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"183841676480671357479799493952353960839",
"141897936446770188312245190792289787624",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"105970117886595635337052237897296646235",
"269544455276885078645675948380991066652",
"87904475457761605244823000217063906823",
"39676461690149922226256473698937205150",
"181465546388732355436992391600378552576",
"169019858900646065474293927378238551897",
"30766719663430059980616966876512827344",
"158053972082671421657949380836439480820",
"54597593806531385750996849696668410041",
"293583054751936198791442818186776674705",
"183598514484845210441149438640835686789",
"217776216541192143148969303213657759596",
"131364144910350037634260475747022602203",
"134097024736294149914501846642394602626",
"93330013648008039761797855334076596985",
"4807715628505579607170903978310907010",
"332373746259226487943675812014198402001",
"216947035821153618574370930070742298934",
"321022405432660062313640279114921902136",
"267896469578827979369867413473337429823",
"139051887183020180100851840052191230954",
"141797842917227928625562124471431465572",
"31643827321822277701851474137868706364",
"19303660516117662534224753192652097407",
"171263581861414301828577254149632442936",
"191216596991804568284478373389200001273",
"74727924725289673170088899863697303704",
"271610233844069635315918008387269948471",
"84371680014248532890931455022258196052",
"16856241298506851931499148406673624405",
"120861825139295321369640718799758660992",
"267944960732863593506007591762368271195",
"175173568929711584570061678292938490317",
"266002229650915655144415318592226932580",
"210563333413674368282733822540140348416",
"16593695270904553604931203735431565012",
"181099604051074799596384976418487657890",
"56492892501836191695829787847471487028",
"47666578413201524430852664042458779122",
"33545593860395841216050872915181342976",
"10022731002592206959717643183175547241",
"27103237588050940549076401224506076086",
"56993239768789620452827161768406332175",
"183185042111761554106900416157919824214",
"249035046499852188439280346374529781200",
"147014555070141035591684957211823376936",
"292868663553564634587357386109234347740",
"267138341291960925141237539409002668162",
"129357614377728138086437361763012085851",
"269943171208947518112515930137646787530",
"85840540550888281096266141805660628586",
"196862198923577110871713745353557369920",
"163869468792151159565326138735167914603",
"59845430094799004585147801209723030096",
"14651397484013066134304585337091623032",
"8660133689539268432318977867941631271",
"154693885715247979263308555618677027431",
"102703634064981422275636922539006253313",
"10598102454458177573942042225839769770",
"173433640390431781676872720328323293956",
"3320512929015196041748048384395320022",
"88813494379228328197503879193964122137",
"179214258769110530901234814609273165510",
"58704135924637798103955502127780748692",
"312773608601132582551218268227985888109",
"142609568019290574457125430884062025990",
"257818094117558644833483363512677799256"
],
"threshold": 0.9
},
"id": "CVE-2024-50164-8fd85b94"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_helper_mem_access"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48068ccaea957469f1adf78dfd2c1c9a7e18f0fe",
"digest": {
"length": 2272.0,
"function_hash": "54178007441229277445088851915125657521"
},
"id": "CVE-2024-50164-95027927"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_kfunc_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54bc31682660810af1bed7ca7a19f182df8d3df8",
"digest": {
"length": 529.0,
"function_hash": "319525126687825767474003285704360236522"
},
"id": "CVE-2024-50164-95f3f4e6"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_func_arg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ea607330a39184f51737c6ae706db7fdca7628e",
"digest": {
"length": 5137.0,
"function_hash": "41291189757911081119035834963304185205"
},
"id": "CVE-2024-50164-9e5a1006"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ea607330a39184f51737c6ae706db7fdca7628e",
"digest": {
"length": 483.0,
"function_hash": "241315833068523644509038366956419670520"
},
"id": "CVE-2024-50164-a3f1e2e4"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_func_arg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54bc31682660810af1bed7ca7a19f182df8d3df8",
"digest": {
"length": 5092.0,
"function_hash": "279881934276292008957589550568749118887"
},
"id": "CVE-2024-50164-b2641cef"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48068ccaea957469f1adf78dfd2c1c9a7e18f0fe",
"digest": {
"line_hashes": [
"123064702207162602641105588423472751038",
"325337278585477448330318555233934966315",
"134440557492818957157517776126813193075",
"281912075887344794344496850893734340998",
"307817570428369981854494852509465050680",
"150347989427477849440022991935349446984",
"3465630489724265759948224559126723233",
"85056965182783872610494439235675288361",
"186493382727667977905002381632646728509",
"99040451780041560663194905358855935253",
"293367263442070690470111990539756566288",
"101962800551801882160217789840767150469",
"227343777401955317729514434338326970795",
"98113112911473925393761848959530322417",
"50005083473690967984536684391090991068",
"268628238659231130002086002885746182556",
"82305563139147309493333646948330685743",
"76427002125123609454187095621811657289",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"183841676480671357479799493952353960839",
"141897936446770188312245190792289787624",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"105970117886595635337052237897296646235",
"269544455276885078645675948380991066652",
"87904475457761605244823000217063906823",
"39676461690149922226256473698937205150",
"181465546388732355436992391600378552576",
"169019858900646065474293927378238551897",
"30766719663430059980616966876512827344",
"158053972082671421657949380836439480820",
"54597593806531385750996849696668410041",
"293583054751936198791442818186776674705",
"183598514484845210441149438640835686789",
"217776216541192143148969303213657759596",
"131364144910350037634260475747022602203",
"134097024736294149914501846642394602626",
"93330013648008039761797855334076596985",
"4807715628505579607170903978310907010",
"332373746259226487943675812014198402001",
"216947035821153618574370930070742298934",
"321022405432660062313640279114921902136",
"267896469578827979369867413473337429823",
"139051887183020180100851840052191230954",
"141797842917227928625562124471431465572",
"31643827321822277701851474137868706364",
"19303660516117662534224753192652097407",
"171263581861414301828577254149632442936",
"191216596991804568284478373389200001273",
"74727924725289673170088899863697303704",
"271610233844069635315918008387269948471",
"84371680014248532890931455022258196052",
"16856241298506851931499148406673624405",
"120861825139295321369640718799758660992",
"267944960732863593506007591762368271195",
"175173568929711584570061678292938490317",
"266002229650915655144415318592226932580",
"210563333413674368282733822540140348416",
"16593695270904553604931203735431565012",
"181099604051074799596384976418487657890",
"56492892501836191695829787847471487028",
"47666578413201524430852664042458779122",
"33545593860395841216050872915181342976",
"10022731002592206959717643183175547241",
"27103237588050940549076401224506076086",
"56993239768789620452827161768406332175",
"183185042111761554106900416157919824214",
"249035046499852188439280346374529781200",
"147014555070141035591684957211823376936",
"292868663553564634587357386109234347740",
"267138341291960925141237539409002668162",
"129357614377728138086437361763012085851",
"269943171208947518112515930137646787530",
"85840540550888281096266141805660628586",
"196862198923577110871713745353557369920",
"163869468792151159565326138735167914603",
"59845430094799004585147801209723030096",
"14651397484013066134304585337091623032",
"8660133689539268432318977867941631271",
"154693885715247979263308555618677027431",
"102703634064981422275636922539006253313",
"10598102454458177573942042225839769770",
"173433640390431781676872720328323293956",
"3320512929015196041748048384395320022",
"88813494379228328197503879193964122137",
"179214258769110530901234814609273165510",
"58704135924637798103955502127780748692",
"312773608601132582551218268227985888109",
"142609568019290574457125430884062025990",
"257818094117558644833483363512677799256"
],
"threshold": 0.9
},
"id": "CVE-2024-50164-badd4706"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43f4df339a4d375bedcad29a61ae6f0ee7a048f8",
"digest": {
"line_hashes": [
"116560571893699650681772131590293932462",
"325337278585477448330318555233934966315",
"134440557492818957157517776126813193075",
"281912075887344794344496850893734340998",
"307817570428369981854494852509465050680",
"150347989427477849440022991935349446984",
"3465630489724265759948224559126723233",
"85056965182783872610494439235675288361",
"186493382727667977905002381632646728509",
"99040451780041560663194905358855935253",
"293367263442070690470111990539756566288",
"101962800551801882160217789840767150469",
"227343777401955317729514434338326970795",
"98113112911473925393761848959530322417",
"50005083473690967984536684391090991068",
"268628238659231130002086002885746182556",
"82305563139147309493333646948330685743",
"76427002125123609454187095621811657289",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"183841676480671357479799493952353960839",
"141897936446770188312245190792289787624",
"19307718301096072520852002364185903044",
"85056965182783872610494439235675288361",
"191298718100943294046572290046886794728",
"269544455276885078645675948380991066652",
"87904475457761605244823000217063906823",
"39676461690149922226256473698937205150",
"229377277110270542220021762525755788718",
"261060573433330369317423814329707483691",
"227917387622212766411203418938639648223",
"327807314481022298509466025311401905923",
"54597593806531385750996849696668410041",
"293583054751936198791442818186776674705",
"183598514484845210441149438640835686789",
"217776216541192143148969303213657759596",
"131364144910350037634260475747022602203",
"134097024736294149914501846642394602626",
"93330013648008039761797855334076596985",
"4807715628505579607170903978310907010",
"135866550664537498978674763450042631388",
"258747727157132072024466384503300561686",
"128399674178204230858999460522107141340",
"98104934170065810348742499626350987702",
"3353976944511470112020103997381519854",
"332373746259226487943675812014198402001",
"216947035821153618574370930070742298934",
"321022405432660062313640279114921902136",
"267896469578827979369867413473337429823",
"139051887183020180100851840052191230954",
"141797842917227928625562124471431465572",
"31643827321822277701851474137868706364",
"19303660516117662534224753192652097407",
"171263581861414301828577254149632442936",
"191216596991804568284478373389200001273",
"74727924725289673170088899863697303704",
"271610233844069635315918008387269948471",
"84371680014248532890931455022258196052",
"16856241298506851931499148406673624405",
"120861825139295321369640718799758660992",
"267944960732863593506007591762368271195",
"175173568929711584570061678292938490317",
"266002229650915655144415318592226932580",
"210563333413674368282733822540140348416",
"16593695270904553604931203735431565012",
"181099604051074799596384976418487657890",
"56492892501836191695829787847471487028",
"47666578413201524430852664042458779122",
"33545593860395841216050872915181342976",
"10022731002592206959717643183175547241",
"27103237588050940549076401224506076086",
"56993239768789620452827161768406332175",
"183185042111761554106900416157919824214",
"249035046499852188439280346374529781200",
"147014555070141035591684957211823376936",
"292868663553564634587357386109234347740",
"267138341291960925141237539409002668162",
"129357614377728138086437361763012085851",
"269943171208947518112515930137646787530",
"85840540550888281096266141805660628586",
"196862198923577110871713745353557369920",
"163869468792151159565326138735167914603",
"59845430094799004585147801209723030096",
"14651397484013066134304585337091623032",
"8660133689539268432318977867941631271",
"154693885715247979263308555618677027431",
"102703634064981422275636922539006253313",
"10598102454458177573942042225839769770",
"173433640390431781676872720328323293956",
"3320512929015196041748048384395320022",
"88813494379228328197503879193964122137",
"179214258769110530901234814609273165510",
"58704135924637798103955502127780748692",
"312773608601132582551218268227985888109",
"142609568019290574457125430884062025990",
"260525293512730456641036990880050533541"
],
"threshold": 0.9
},
"id": "CVE-2024-50164-bdf7711b"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_helper_mem_access"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ea607330a39184f51737c6ae706db7fdca7628e",
"digest": {
"length": 2272.0,
"function_hash": "54178007441229277445088851915125657521"
},
"id": "CVE-2024-50164-d3735071"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_helper_mem_access"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@43f4df339a4d375bedcad29a61ae6f0ee7a048f8",
"digest": {
"length": 2163.0,
"function_hash": "155794361966810292970614342635431927918"
},
"id": "CVE-2024-50164-d4118a54"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "kernel/bpf/verifier.c",
"function": "check_mem_size_reg"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48068ccaea957469f1adf78dfd2c1c9a7e18f0fe",
"digest": {
"length": 871.0,
"function_hash": "201660618489984045611542153104627860655"
},
"id": "CVE-2024-50164-fb4ff21c"
}
]