CVE-2024-36481: tracing/probes: fix error check in parse_btf_field()
In the Linux kernel, the following vulnerability has been resolved:
tracing/probes: fix error check in parsebtffield()
btffindstructmember() might return NULL or an error via the ERRPTR() macro. However, its caller in parsebtffield() only checks for the NULL condition. Fix this by using ISERR() and returning the error up the stack.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36481?
CVE-2024-36481 has been classified with a severity level that reflects its potential impact on system security.
How do I fix CVE-2024-36481?
To fix CVE-2024-36481, you should update the Linux kernel to the latest available version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-36481?
CVE-2024-36481 affects multiple versions of the Linux kernel, specifically versions up to 6.6 and certain inclusive ranges in later versions.
What components are impacted by CVE-2024-36481?
CVE-2024-36481 impacts the tracing/probes functionality within the Linux kernel.
Is there a workaround for CVE-2024-36481 if I cannot update immediately?
Currently, there are no known workarounds for CVE-2024-36481, so updating to a patched version is strongly recommended.