CVE-2024-47794

In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tailcall infinite loop caused by freplace There is a potential infinite loop issue that can occur when using a combination of tail calls and freplace. In an upcoming selftest, the attach target for entry_freplace of tailcall_freplace.c is subprog_tc of tc_bpf2bpf.c, while the tail call in entry_freplace leads to entry_tc. This results in an infinite loop: entry_tc -> subprog_tc -> entry_freplace --tailcall-> entry_tc. The problem arises because the tail_call_cnt in entry_freplace resets to zero each time entry_freplace is executed, causing the tail call mechanism to never terminate, eventually leading to a kernel panic. To fix this issue, the solution is twofold: 1. Prevent updating a program extended by an freplace program to a prog_array map. 2. Prevent extending a program that is already part of a prog_array map with an freplace program. This ensures that: * If a program or its subprogram has been extended by an freplace program, it can no longer be updated to a prog_array map. * If a program has been added to a prog_array map, neither it nor its subprograms can be extended by an freplace program. Moreover, an extension program should not be tailcalled. As such, return -EINVAL if the program has a type of BPF_PROG_TYPE_EXT when adding it to a prog_array map. Additionally, fix a minor code style issue by replacing eight spaces with a tab for proper formatting.

• CWE-835

• https://git.kernel.org/stable/c/987aa730bad3e1ef66d9f30182294daa78f6387dPatch
• https://git.kernel.org/stable/c/d6083f040d5d8f8d748462c77e90547097df936ePatch

Published

Jan 11, 2025

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47784Unverified Password Change for ANC software that allows an a…2.6
• CVE-2024-47789** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in…8.7
• CVE-2024-4779The Unlimited Elements For Elementor (Free Widgets, Addons, …8.8
• CVE-2024-47790** UNSUPPORTED WHEN ASSIGNED ** This vulnerability exists in…8.7
• CVE-2024-47791Ruijie Reyee OS versions 2.206.x up to but not including 2.3…5.3
• CVE-2024-47793Stored cross-site scripting vulnerability exists in Exment v…5.4
• CVE-2024-47795Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ …6.7
• CVE-2024-47796An improper array index validation vulnerability exists in t…7.8
• CVE-2024-47797in OpenHarmony v4.1.0 and prior versions allow a local attac…7.8
• CVE-2024-47799Exposure of sensitive system information to an unauthorized …3.5
• CVE-2024-4780The Image Hover Effects – Elementor Addon plugin for WordPre…6.4
• CVE-2024-47800Uncontrolled search path for some Intel(R) Graphics Driver s…6.7