CVE-2024-38662: bpf: Allow delete from sockmap/sockhash only if update is allowed
Published Jun 21, 2024
·Updated
bpf: Allow delete from sockmap/sockhash only if update is allowed
Affected Software
12 affected componentsFixes available
Linux Linux kernel>=5.10<5.10.219
Linux Linux kernel>=5.15<5.15.161
Linux Linux kernel>=6.1<6.1.93
Linux Linux kernel>=6.6<6.6.33
Linux Linux kernel>=6.9<6.9.4
Linux Linux kernel=6.10.0-rc1
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
Microsoft cbl2 kernel 5.15.160.1-1
Microsoft azl3 kernel 6.6.29.1-5
Microsoft cbl2 kernel 5.15.160.1-1
Microsoft cbl2 kernel 5.15.162.2-1
Microsoft azl3 kernel 6.6.35.1-4
Remediation
Event History
Jun 21, 2024
CVE Published
via MITRE·11:15 AM
Data Sourced
via MITRE·11:15 AM
Description
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityAffected Software
Aug 5, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Sep 11, 2024
Data Sourced
via Launchpad·04:24 PM
Description
Apr 27, 2025
Data Sourced
via Ubuntu·05:19 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-38662?
CVE-2024-38662 has been classified with a high severity level due to its impact on the Linux kernel's BPF functionality.
2
How do I fix CVE-2024-38662?
To address CVE-2024-38662, upgrade to the fixed versions of the Linux kernel recommended in the security advisories.
3
What versions of the Linux kernel are affected by CVE-2024-38662?
CVE-2024-38662 affects multiple versions of the Linux kernel between 5.10 and 6.10.0-rc1.
4
What type of vulnerability is CVE-2024-38662?
CVE-2024-38662 is a BPF-related vulnerability that allows improper deletion from sockmap/sockhash under certain conditions.
5
Is there an exploit available for CVE-2024-38662?
As of now, specific exploit details for CVE-2024-38662 are not publicly known, but it is considered a serious vulnerability.