CVE-2024-26589: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS

Q: What is the severity of CVE-2024-26589?

CVE-2024-26589 has a high severity rating due to the potential for unauthorized access to sensitive information.

Q: How do I fix CVE-2024-26589?

To fix CVE-2024-26589, upgrade your Linux kernel to a version that includes the security patch, such as 6.1.123-1 or newer.

Q: Which Linux kernel versions are affected by CVE-2024-26589?

CVE-2024-26589 affects Linux kernel versions from 4.20 up to 5.15.148 and from 5.16.0 up to 6.1.75, among others.

Q: What impact does CVE-2024-26589 have on Linux Kernel security?

CVE-2024-26589 allows for unchecked variable offsets in pointer arithmetic, potentially leading to memory corruption and security breaches.

Q: Is there a workaround for CVE-2024-26589?

Currently, the recommended solution is to upgrade the Linux kernel to a patched version, as no effective workaround exists.

Published Feb 22, 2024

Updated

bpf: Reject variable offset alu on PTRTOFLOWKEYS

For PTRTOFLOWKEYS, checkflowkeysaccess() only uses fixed off for validation. However, variable offset ptr alu is not prohibited for this ptr kind. So the variable offset is not checked.

The following prog is accepted:

func#0 @0 0: R1=ctx() R10=fp0 0: (bf) r6 = r1 ; R1=ctx() R6w=ctx() 1: (79) r7 = (u64 )(r6 +144) ; R6w=ctx() R7w=flowkeys() 2: (b7) r8 = 1024 ; R8w=1024 3: (37) r8 /= 1 ; R8w=scalar() 4: (57) r8 &= 1024 ; R8w=scalar(smin=smin32=0, smax=umax=smax32=umax32=1024,varoff=(0x0; 0x400)) 5: (0f) r7 += r8 markprecise: frame0: lastidx 5 firstidx 0 subseqidx -1 markprecise: frame0: regs=r8 stack= before 4: (57) r8 &= 1024 markprecise: frame0: regs=r8 stack= before 3: (37) r8 /= 1 markprecise: frame0: regs=r8 stack= before 2: (b7) r8 = 1024 6: R7w=flowkeys(smin=smin32=0,smax=umax=smax32=umax32=1024,varoff =(0x0; 0x400)) R8w=scalar(smin=smin32=0,smax=umax=smax32=umax32=1024, varoff=(0x0; 0x400)) 6: (79) r0 = (u64 )(r7 +0) ; R0w=scalar() 7: (95) exit

This prog loads flowkeys to r7, and adds the variable offset r8 to r7, and finally causes out-of-bounds access:

BUG: unable to handle page fault for address: ffffc90014c80038 [...] Call Trace: <TASK> bpfdispatchernopfunc include/linux/bpf.h:1231 [inline] bpfprogrun include/linux/filter.h:651 [inline] bpfprogrun include/linux/filter.h:658 [inline] bpfprogrunpinoncpu include/linux/filter.h:675 [inline] bpfflowdissect+0x15f/0x350 net/core/flowdissector.c:991 bpfprogtestrunflowdissector+0x39d/0x620 net/bpf/testrun.c:1359 bpfprogtestrun kernel/bpf/syscall.c:4107 [inline] sysbpf+0xf8f/0x4560 kernel/bpf/syscall.c:5475 dosysbpf kernel/bpf/syscall.c:5561 [inline] sesysbpf kernel/bpf/syscall.c:5559 [inline] x64sysbpf+0x73/0xb0 kernel/bpf/syscall.c:5559 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0x3f/0x110 arch/x86/entry/common.c:83 entrySYSCALL64afterhwframe+0x63/0x6b

Fix this by rejecting ptr alu with variable offset on flowkeys. Applying the patch rejects the program with "R7 pointer arithmetic on flowkeys prohibited".

Affected Software

155 affected componentsFixes available

Linux Linux kernel>=4.20<5.15.148

Linux Linux kernel>=5.16.0<6.1.75

Linux Linux kernel>=6.2.0<6.6.14

Linux Linux kernel>=6.7.0<6.7.2

debian/linux<6.1.76-1

6.1.76-1

debian/linux<6.6.15-1

6.6.15-1

debian/linux<6.6.15-1

6.6.15-1

linux/kernel>=4.20.0<5.10.273

5.10.273

linux/kernel>=5.11.0<5.15.148

5.15.148

linux/kernel>=5.16.0<6.1.75

6.1.75

linux/kernel>=6.2.0<6.6.14

6.6.14

linux/kernel>=6.7.0<6.7.2

6.7.2

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1123.133~18.04.1

5.4.0-1123.133~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1128.135~18.04.1

5.4.0-1128.135~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1127.136~18.04.1

5.4.0-1127.136~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-177.197~18.04.1

5.4.0-177.197~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1070.75~18.04.1

5.4.0-1070.75~18.04.1

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1122.131~18.04.1

5.4.0-1122.131~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1107.119~18.04.1

5.4.0-1107.119~18.04.1

ubuntu/linux<5.4.0-177.197

5.4.0-177.197

ubuntu/linux-aws<5.4.0-1123.133

5.4.0-1123.133

ubuntu/linux-aws-5.15<5.15.0-1057.63~20.04.1

5.15.0-1057.63~20.04.1

ubuntu/linux-azure<5.4.0-1128.135

5.4.0-1128.135

ubuntu/linux-azure-5.15<5.15.0-1060.69~20.04.1

5.15.0-1060.69~20.04.1

ubuntu/linux-bluefield<5.4.0-1083.90

5.4.0-1083.90

ubuntu/linux-gcp<5.4.0-1127.136

5.4.0-1127.136

ubuntu/linux-gcp-5.15<5.15.0-1055.63~20.04.1

5.15.0-1055.63~20.04.1

ubuntu/linux-gkeop<5.4.0-1090.94

5.4.0-1090.94

ubuntu/linux-gkeop-5.15<5.15.0-1040.46~20.04.1

5.15.0-1040.46~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-102.112~20.04.1

5.15.0-102.112~20.04.1

ubuntu/linux-ibm<5.4.0-1070.75

5.4.0-1070.75

ubuntu/linux-ibm-5.15<5.15.0-1050.53~20.04.1

5.15.0-1050.53~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1052.58~20.04.1

5.15.0-1052.58~20.04.1

ubuntu/linux-iot<5.4.0-1035.36

5.4.0-1035.36

ubuntu/linux-kvm<5.4.0-1111.118

5.4.0-1111.118

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-102.112~20.04.1

5.15.0-102.112~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1025.25~20.04.1

5.15.0-1025.25~20.04.1

ubuntu/linux-oracle<5.4.0-1122.131

5.4.0-1122.131

ubuntu/linux-oracle-5.15<5.15.0-1055.61~20.04.1

5.15.0-1055.61~20.04.1

ubuntu/linux-raspi<5.4.0-1107.119

5.4.0-1107.119

ubuntu/linux-riscv-5.15<5.15.0-1053.57~20.04.1

5.15.0-1053.57~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1042.46

5.4.0-1042.46

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1123.133+fips1

5.4.0-1123.133+fips1

ubuntu/linux-azure-fips<5.4.0-1128.135+fips1

5.4.0-1128.135+fips1

ubuntu/linux-fips<5.4.0-1097.107

5.4.0-1097.107

ubuntu/linux-gcp-fips<5.4.0-1127.136+fips1

5.4.0-1127.136+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-102.112

5.15.0-102.112

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1057.63

5.15.0-1057.63

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5<6.5.0-1018.18~22.04.1

6.5.0-1018.18~22.04.1

ubuntu/linux-azure<5.15.0-1060.69

5.15.0-1060.69

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5<6.5.0-1019.20~22.04.1

6.5.0-1019.20~22.04.1

ubuntu/linux-azure-fde<5.15.0-1060.69.1

5.15.0-1060.69.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1055.63

5.15.0-1055.63

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5<6.5.0-1018.18~22.04.1

6.5.0-1018.18~22.04.1

ubuntu/linux-gke<5.15.0-1054.59

5.15.0-1054.59

ubuntu/linux-gkeop<5.15.0-1040.46

5.15.0-1040.46

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5<6.5.0-28.29~22.04.1

6.5.0-28.29~22.04.1

ubuntu/linux-ibm<5.15.0-1050.53

5.15.0-1050.53

ubuntu/linux-intel-iotg<5.15.0-1052.58

5.15.0-1052.58

ubuntu/linux-kvm<5.15.0-1054.59

5.15.0-1054.59

ubuntu/linux-lowlatency<5.15.0-102.112

5.15.0-102.112

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5<6.5.0-28.29.1~22.04.1

6.5.0-28.29.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1048.48

5.15.0-1048.48

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5<6.5.0-1015.15

6.5.0-1015.15

ubuntu/linux-nvidia-tegra<5.15.0-1025.25

5.15.0-1025.25

ubuntu/linux-nvidia-tegra-igx<5.15.0-1012.12

5.15.0-1012.12

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1<6.1.0-1035.35

6.1.0-1035.35

ubuntu/linux-oem-6.5<6.5.0-1020.21

6.5.0-1020.21

ubuntu/linux-oracle<5.15.0-1055.61

5.15.0-1055.61

ubuntu/linux-oracle-6.5<6.5.0-1021.21~22.04.1

6.5.0-1021.21~22.04.1

ubuntu/linux-raspi<5.15.0-1050.53

5.15.0-1050.53

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5<6.5.0-28.29.1~22.04.1

6.5.0-28.29.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5<6.5.0-1012.13~22.04.1

6.5.0-1012.13~22.04.1

ubuntu/linux-xilinx-zynqmp<5.15.0-1030.34

5.15.0-1030.34

ubuntu/linux-bluefield<5.15.0-1040.42

5.15.0-1040.42

ubuntu/linux-intel-iot-realtime<5.15.0-1050.52

5.15.0-1050.52

ubuntu/linux-realtime<5.15.0-1058.66

5.15.0-1058.66

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1057.63+fips1

5.15.0-1057.63+fips1

ubuntu/linux-azure-fips<5.15.0-1060.69+fips1

5.15.0-1060.69+fips1

ubuntu/linux-fips<5.15.0-102.112+fips1

5.15.0-102.112+fips1

ubuntu/linux-gcp-fips<5.15.0-1055.63+fips2

5.15.0-1055.63+fips2

ubuntu/linux-raspi-realtime<6.8.0-2001.1

6.8.0-2001.1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.76-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.6.15-1
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.273
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.148
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.75
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.14
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.7.2
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1123.133~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1128.135~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.136~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-177.197~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1070.75~18.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.131~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1107.119~18.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-177.197
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1123.133
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.63~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1128.135
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1083.90
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.136
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.63~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.4.0-1090.94
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.46~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1070.75
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.53~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.58~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1035.36
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1111.118
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.25~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1122.131
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.61~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1107.119
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1053.57~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1042.46
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1123.133+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1128.135+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1097.107
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.136+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.63
Upgrade
Upgrade ubuntu/linux-aws-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1018.18~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69
Upgrade
Upgrade ubuntu/linux-azure-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1019.20~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.63
Upgrade
Upgrade ubuntu/linux-gcp-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1018.18~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1054.59
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.46
Upgrade
Upgrade ubuntu/linux-hwe-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-28.29~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.53
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.58
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1054.59
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-28.29.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.48
Upgrade
Upgrade ubuntu/linux-nvidia-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1015.15
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1025.25
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1012.12
Upgrade
Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.
Fixed in 6.1.0-1035.35
Upgrade
Upgrade ubuntu/linux-oem-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1020.21
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.61
Upgrade
Upgrade ubuntu/linux-oracle-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1021.21~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.53
Upgrade
Upgrade ubuntu/linux-riscv-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-28.29.1~22.04.1
Upgrade
Upgrade ubuntu/linux-starfive-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1012.13~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1030.34
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1040.42
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.52
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1058.66
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.63+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1060.69+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-102.112+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1055.63+fips2
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2001.1
Compensating control
In the eBPF verifier/bpf ALU handling for PTR_TO_FLOW_KEYS, reject pointer arithmetic (ptr alu) when the ALU offset is variable (var_off not fixed), i.e., enforce that check_flow_keys_access() validation only permits fixed offsets for PTR_TO_FLOW_KEYS and prohibits variable-offset pointer arithmetic.

Event History

Feb 22, 2024

CVE Published

via MITRE·04:13 PM

Data Sourced

via MITRE·04:13 PM

DescriptionSeverity

Data Sourced

via OSV·04:13 PM

DescriptionSeverityAffected Software

Event

via OSV·05:15 PM

Data Sourced

via NVD·05:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Feb 23, 2024

Data Sourced

via Red Hat·01:58 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-26589?

CVE-2024-26589 has a high severity rating due to the potential for unauthorized access to sensitive information.

How do I fix CVE-2024-26589?

To fix CVE-2024-26589, upgrade your Linux kernel to a version that includes the security patch, such as 6.1.123-1 or newer.

Which Linux kernel versions are affected by CVE-2024-26589?

CVE-2024-26589 affects Linux kernel versions from 4.20 up to 5.15.148 and from 5.16.0 up to 6.1.75, among others.

What impact does CVE-2024-26589 have on Linux Kernel security?

CVE-2024-26589 allows for unchecked variable offsets in pointer arithmetic, potentially leading to memory corruption and security breaches.

Is there a workaround for CVE-2024-26589?

Currently, the recommended solution is to upgrade the Linux kernel to a patched version, as no effective workaround exists.

CVE-2024-26589: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2024-26589?

How do I fix CVE-2024-26589?

Which Linux kernel versions are affected by CVE-2024-26589?

What impact does CVE-2024-26589 have on Linux Kernel security?

Is there a workaround for CVE-2024-26589?

Company

Resources

Contact