CVE-2024-36918

bpf: Check bloom filter map value size

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom filter creating, rejecting values above KMALLOC_MAX_SIZE. This brings the bloom map in line with many other map types. The lack of this protection can cause kernel crashes for value sizes that overflow int's. Such a crash was caught by syzkaller. The next patch adds more guard-rails at a lower level.

N/A

CVSS

Severity:

EPSS 0.13%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/fa6995eeb62e74b5a1480c73fb7b420c270784d3
https://git.kernel.org/stable/c/608e13706c8b6c658a0646f09ebced74ec367f7c
https://git.kernel.org/stable/c/c418afb9bf23e2f2b76cb819601e4a5d9dbab42d
https://git.kernel.org/stable/c/a8d89feba7e54e691ca7c4efc2a6264fa83f3687

Frequently Asked Questions

What is the severity of CVE-2024-36918?: CVE-2024-36918 has not yet been assigned a CVSS score.
How to fix CVE-2024-36918?: To fix CVE-2024-36918, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-36918 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-36918 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-36918?: CVE-2024-36918 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.