CVE-2024-50262

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50262
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50262.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50262
Downstream
Related
Published
2024-11-09T10:17:50.461Z
Modified
2026-05-28T03:53:55.043768578Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
bpf: Fix out-of-bounds write in trie_get_next_key()
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix out-of-bounds write in triegetnext_key()

triegetnextkey() allocates a node stack with size trie->maxprefixlen, while it writes (trie->maxprefixlen + 1) nodes to the stack when it has full paths from the root to leaves. For example, consider a trie with maxprefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ... 0x00/8 inserted. Subsequent calls to triegetnext_key with _key with .prefixlen = 8 make 9 nodes be written on the node stack with size 8.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50262.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b471f2f1de8b816f1e799b80aa92588f3566e4bd
Fixed
e8494ac079814a53fbc2258d2743e720907488ed
Fixed
91afbc0eb3c90258ae378ae3c6ead3d2371e926d
Fixed
590976f921723d53ac199c01d5b7b73a94875e68
Fixed
86c8ebe02d8806dd8878d0063e8e185622ab6ea6
Fixed
a035df0b98df424559fd383e8e1a268f422ea2ba
Fixed
90a6e0e1e151ef7a9282e78f54c3091de2dcc99c
Fixed
c4b4f9a9ab82238cb158fa4fe61a8c0ae21a4980
Fixed
13400ac8fb80c57c2bfb12ebd35ee121ce9b4d21

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50262.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.16.0
Fixed
4.19.323
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.285
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.229
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.171
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.116
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.60
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50262.json"