Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-42067 Details

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_memory_rox() can fail, leaving memory unprotected. Check return and bail out when bpf_jit_binary_lock_ro() returns an error.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a kernel.orgPatch
https://git.kernel.org/stable/c/e60adf513275c3a38e5cb67f7fd12387e43a3ff5 kernel.orgPatch
https://git.kernel.org/stable/c/044da7ae7afd4ef60806d73654a2e6a79aa4ed7a CVEPatch
https://git.kernel.org/stable/c/08f6c05feb1db21653e98ca84ea04ca032d014c7 CVEPatch
https://git.kernel.org/stable/c/9fef36cad60d4226f9d06953cd56d1d2f9119730 CVEPatch

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-252Unchecked Return Value[email protected]

Affected Products

ProductVersions
linux linux kernel
< 6.6.37
>= 6.7, < 6.9.8

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-42067
NVD Published Date:
Jul 29, 2024
NVD Last Modified:
Aug 4, 2026
Source:
kernel.org
CVE-2024-42067 Details - Not Deferred