RHSA-2024:9187: Low: bcc security update
BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.Security Fix(es): bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.5 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What are the affected products for RHSA-2024:9187?
The affected products include Red Hat CodeReady Linux Builder, Red Hat Enterprise Linux, and multiple architectures like x86_64, ARM 64, and IBM z Systems.
What is the severity level of RHSA-2024:9187?
RHSA-2024:9187 has a critical severity level due to the potential for unprivileged users to exploit the vulnerability.
How do I mitigate the risks associated with RHSA-2024:9187?
To mitigate the risks, update the bcc package to version 0.30.0-6.el9 or later.
What is the nature of the vulnerability addressed in RHSA-2024:9187?
The vulnerability allows unprivileged users to load compromised Linux headers, which can lead to exploitation.
Is there a recommended version for safety after RHSA-2024:9187?
Yes, the recommended version to ensure safety is bcc 0.30.0-6.el9 or later.