CVE-2024-49850 Details
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos In case of malformed relocation record of kind BPF_CORE_TYPE_ID_LOCAL referencing a non-existing BTF type, function bpf_core_calc_relo_insn would cause a null pointer deference. Fix this by adding a proper check upper in call stack, as malformed relocation records could be passed from user space. Simplest reproducer is a program: r0 = 0 exit With a single relocation record: .insn_off = 0, /* patch first instruction */ .type_id = 100500, /* this type id does not exist */ .access_str_off = 6, /* offset of string "0" */ .kind = BPF_CORE_TYPE_ID_LOCAL, See the link for original reproducer or next commit for a test case.
A null pointer dereference vulnerability has been identified in the Linux kernel's BPF subsystem. This issue arises when a malformed relocation record of type BPF_CORE_TYPE_ID_LOCAL references a non-existent BTF type. The function responsible for handling these relocation records, bpf_core_calc_relo_insn, does not properly validate the type ID, leading to a crash. The vulnerability can be exploited by sending a malformed relocation record from user space.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. For Debian users, the updated kernel version 6.1.119-1~deb11u1 is available.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 21, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.17, < 6.1.113 >= 6.2, < 6.6.54 >= 6.7, < 6.10.13 >= 6.11, < 6.11.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 3, 2025 | CVE Modified | CVE |
| Oct 22, 2024 | Initial Analysis | [email protected] |
| Oct 21, 2024 | New CVE Received | kernel.org |