CVE-2024-47703 Details

A vulnerability in the Linux kernel's handling of BPF (Berkeley Packet Filter) LSM (Linux Security Module) return values has been identified. When a BPF program returns a positive number to the file_alloc_security hook, it can trigger a kernel panic. This issue arises because the file system cannot properly interpret the positive return value using the IS_ERR function, mistakenly treating it as a file pointer. The problem emerged after the introduction of BPF LSM, as the file_alloc_security hook had never returned a positive value before. Other BPF LSM hooks could potentially face similar issues. The vulnerability affects the Linux kernel stable tree.

The vulnerability has been addressed in the Linux kernel stable tree. Users can upgrade to the latest version of the kernel to apply the fix.