THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2024-26589 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS For PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off for validation. However, variable offset ptr alu is not prohibited for this ptr kind. So th

[NVD] CVE-2024-26589 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS For PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off for validation. However, variable offset ptr alu is not prohibited for this ptr kind. So th

lownvdPublished 2024-02-22

CVE-2024-26589 CVSS: 7.8 HIGH Published: 2024-02-22T17:15:09.050

In the Linux kernel, the following vulnerability has been resolved:

bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS

For PTR_TO_FLOW_KEYS, check_flow_keys_access() only uses fixed off for validation. However, variable offset ptr alu is not prohibited for this ptr kind. So the variable offset is not checked.

The following prog

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-26589