CVE-2024-42161: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
Published Jul 30, 2024
·Updated
bpf: Avoid uninitialized value in BPFCOREREADBITFIELD
Affected Software
12 affected componentsFixes available
Linux Linux kernel<5.10.222
Linux Linux kernel>=5.11<5.15.163
Linux Linux kernel>=5.16<6.1.98
Linux Linux kernel>=6.2<6.6.39
Linux Linux kernel>=6.7<6.9.9
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
debian/linux-6.1
6.1.129-1~deb11u1
Microsoft cbl2 kernel 5.15.162.2-1
Microsoft cbl2 kernel 5.15.162.2-1
Microsoft azl3 kernel 6.6.43.1-7
Microsoft azl3 kernel 6.6.35.1-5
Microsoft cbl2 kernel 5.15.163.1-1
Remediation
Event History
Jul 30, 2024
CVE Published
via MITRE·07:47 AM
Data Sourced
via MITRE·07:47 AM
Description
Data Sourced
via NVD·08:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Aug 16, 2024
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Updated
via Microsoft·07:00 AM
Description
May 5, 2025
Data Sourced
via Ubuntu·12:35 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-42161?
CVE-2024-42161 is classified with a severity that may include potential security risks to the Linux kernel.
2
How do I fix CVE-2024-42161?
To mitigate CVE-2024-42161, update to the patched versions of the Linux kernel listed in the vulnerability's advisory.
3
Which versions of Linux are affected by CVE-2024-42161?
CVE-2024-42161 impacts Linux kernel versions prior to certain patched releases, specifically those below 5.10.223, 5.10.226, 6.1.123, and others specified in the advisory.
4
Is CVE-2024-42161 exploitable remotely?
The exploitability of CVE-2024-42161 in a remote context depends on specific system configurations and use cases of the affected kernel.
5
What is the nature of the vulnerability in CVE-2024-42161?
CVE-2024-42161 involves the use of uninitialized values in BPF_CORE_READ_BITFIELD within the Linux kernel.