In the Linux kernel, the following vulnerability has been resolved:
bpf: Check validity of link->type in bpflinkshow_fdinfo()
If a newly-added link type doesn't invoke BPFLINKTYPE(), accessing bpflinktype_strs[link->type] may result in an out-of-bounds access.
To spot such missed invocations early in the future, checking the validity of link->type in bpflinkshow_fdinfo() and emitting a warning when such invocations are missed.
[
{
"id": "CVE-2024-53099-01bb0c9e",
"deprecated": false,
"target": {
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f87a6ec39fb5968049a6775a528bf58b25c20a",
"digest": {
"line_hashes": [
"82228816540032711672891963126094162627",
"279635295895217551852052392236820160292",
"140657268563638835844248470498594082994",
"438636882692763220050942390094200458",
"9268056152105646346351690259534722558",
"338203530033888748161175634671857116210",
"119791878189454590654892693999404341348",
"238398181167949630712986582811857021046",
"252213979864326342636168052084817617111",
"160480868016284254888655969601248553253",
"259099637316029570521206519235675659049"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-53099-09679dd0",
"deprecated": false,
"target": {
"function": "bpf_link_show_fdinfo",
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24fec234d2ba9ca3c14e545ebe3fd6dcb47f074d",
"digest": {
"function_hash": "140083593166469212599090347962210449616",
"length": 518.0
}
},
{
"id": "CVE-2024-53099-17d5f82b",
"deprecated": false,
"target": {
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24fec234d2ba9ca3c14e545ebe3fd6dcb47f074d",
"digest": {
"line_hashes": [
"82228816540032711672891963126094162627",
"279635295895217551852052392236820160292",
"140657268563638835844248470498594082994",
"438636882692763220050942390094200458",
"9268056152105646346351690259534722558",
"338203530033888748161175634671857116210",
"119791878189454590654892693999404341348",
"238398181167949630712986582811857021046",
"252213979864326342636168052084817617111",
"160480868016284254888655969601248553253",
"259099637316029570521206519235675659049"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-53099-2cfe7533",
"deprecated": false,
"target": {
"function": "bpf_link_show_fdinfo",
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e8074bb33d18f56af30a0252cb3606d27eb1c13",
"digest": {
"function_hash": "140083593166469212599090347962210449616",
"length": 518.0
}
},
{
"id": "CVE-2024-53099-2ff88b44",
"deprecated": false,
"target": {
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8421d4c8762bd022cb491f2f0f7019ef51b4f0a7",
"digest": {
"line_hashes": [
"82228816540032711672891963126094162627",
"279635295895217551852052392236820160292",
"264495168143544510037125196538829910996",
"302083528110074203722624695476624573469",
"276936753211378188638471505274168677839",
"99704904064657421347828551027462517370",
"321104515307318481708937434190733109666",
"220529135789735498777960953584559669562",
"185511128894829944830478026417377376961",
"215573201599877659347059332047376596289"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-53099-302771e3",
"deprecated": false,
"target": {
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3eb1b6a9f745d6941b345f0fae014dc8bb06d36",
"digest": {
"line_hashes": [
"82228816540032711672891963126094162627",
"279635295895217551852052392236820160292",
"264495168143544510037125196538829910996",
"302083528110074203722624695476624573469",
"276936753211378188638471505274168677839",
"99704904064657421347828551027462517370",
"321104515307318481708937434190733109666",
"220529135789735498777960953584559669562",
"185511128894829944830478026417377376961",
"215573201599877659347059332047376596289"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-53099-32635fc0",
"deprecated": false,
"target": {
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e8074bb33d18f56af30a0252cb3606d27eb1c13",
"digest": {
"line_hashes": [
"82228816540032711672891963126094162627",
"279635295895217551852052392236820160292",
"140657268563638835844248470498594082994",
"438636882692763220050942390094200458",
"9268056152105646346351690259534722558",
"338203530033888748161175634671857116210",
"119791878189454590654892693999404341348",
"238398181167949630712986582811857021046",
"252213979864326342636168052084817617111",
"160480868016284254888655969601248553253",
"259099637316029570521206519235675659049"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-53099-43699ae2",
"deprecated": false,
"target": {
"function": "bpf_link_show_fdinfo",
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8421d4c8762bd022cb491f2f0f7019ef51b4f0a7",
"digest": {
"function_hash": "188564632944570916567966564308174608427",
"length": 552.0
}
},
{
"id": "CVE-2024-53099-6eb6398e",
"deprecated": false,
"target": {
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5092b0a1aaf35d77ebd8d33384d7930bec5cb5d",
"digest": {
"line_hashes": [
"82228816540032711672891963126094162627",
"279635295895217551852052392236820160292",
"264495168143544510037125196538829910996",
"302083528110074203722624695476624573469",
"276936753211378188638471505274168677839",
"99704904064657421347828551027462517370",
"321104515307318481708937434190733109666",
"220529135789735498777960953584559669562",
"185511128894829944830478026417377376961",
"215573201599877659347059332047376596289"
],
"threshold": 0.9
}
},
{
"id": "CVE-2024-53099-7f0d7055",
"deprecated": false,
"target": {
"function": "bpf_link_show_fdinfo",
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79f87a6ec39fb5968049a6775a528bf58b25c20a",
"digest": {
"function_hash": "140083593166469212599090347962210449616",
"length": 518.0
}
},
{
"id": "CVE-2024-53099-910303c3",
"deprecated": false,
"target": {
"function": "bpf_link_show_fdinfo",
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3eb1b6a9f745d6941b345f0fae014dc8bb06d36",
"digest": {
"function_hash": "188564632944570916567966564308174608427",
"length": 552.0
}
},
{
"id": "CVE-2024-53099-e04caf9f",
"deprecated": false,
"target": {
"function": "bpf_link_show_fdinfo",
"file": "kernel/bpf/syscall.c"
},
"signature_version": "v1",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d5092b0a1aaf35d77ebd8d33384d7930bec5cb5d",
"digest": {
"function_hash": "188564632944570916567966564308174608427",
"length": 552.0
}
}
]