Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-38564 Details

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE bpf_prog_attach uses attach_type_to_prog_type to enforce proper attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses bpf_prog_get and relies on bpf_prog_attach_check_attach_type to properly verify prog_type <> attach_type association. Add missing attach_type enforcement for the link_create case. Otherwise, it's currently possible to attach cgroup_skb prog types to other cgroup hooks.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/543576ec15b17c0c93301ac8297333c7b6e84ac7	kernel.org	Patch
https://git.kernel.org/stable/c/6675c541f540a29487a802d3135280b69b9f568d	kernel.org	Patch
https://git.kernel.org/stable/c/67929e973f5a347f05fef064fea4ae79e7cdb5fd	kernel.org	Patch
https://git.kernel.org/stable/c/b34bbc76651065a5eafad8ddff1eb8d1f8473172	kernel.org	Patch
https://git.kernel.org/stable/c/543576ec15b17c0c93301ac8297333c7b6e84ac7	CVE	Patch
https://git.kernel.org/stable/c/6675c541f540a29487a802d3135280b69b9f568d	CVE	Patch
https://git.kernel.org/stable/c/67929e973f5a347f05fef064fea4ae79e7cdb5fd	CVE	Patch
https://git.kernel.org/stable/c/b34bbc76651065a5eafad8ddff1eb8d1f8473172	CVE	Patch

see all 8 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
linux linux kernel	>= 5.10, < 6.6.33 >= 6.7, < 6.8.12 >= 6.9, < 6.9.3
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Oct 20, 2025	Initial Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Jun 27, 2024	CVE Modified	kernel.org
Jun 19, 2024	New CVE Received	kernel.org