CVE-2024-26884: bpf: Fix hashtab overflow check on 32-bit arches
bpf: Fix hashtab overflow check on 32-bit arches
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Configuration
Update the bpf hashtab code so the 32-bit overflow check is performed before calling roundup_pow_of_two(), rather than relying on an overflow check after the roundup result (checking for 0). This prevents undefined behaviour from a 32-bit left-shift during roundup_pow_of_two() on 32-bit architectures.
Linux kernel bpf hashtab hashtab overflow check placement = Move the overflow check to occur before roundup_pow_of_two() (instead of checking the roundup result for 0 on 32-bit arches)
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26884?
The severity of CVE-2024-26884 is classified as high due to its potential impact on system stability and security.
How do I fix CVE-2024-26884?
To fix CVE-2024-26884, upgrade the Linux kernel to one of the patched versions such as 5.10.223-1 or 6.1.123-1.
What versions of the Linux kernel are affected by CVE-2024-26884?
CVE-2024-26884 affects multiple versions of the Linux kernel from 3.19 to 6.8.2.
Is CVE-2024-26884 related to buffer overflow vulnerabilities?
Yes, CVE-2024-26884 addresses an issue with hashtab overflow checks that can lead to vulnerabilities on 32-bit architectures.
What is the nature of the flaw in CVE-2024-26884?
CVE-2024-26884 involves an overflow check in the hashtab code that incorrectly assumes the result will not be zero.