CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nr_words in bpf_iter_bits_new() Check the validity of nr_words in bpf_iter_bits_new(). Without this check, when multiplication overflow occurs for nr_bits (e.g., when nr_words = 0x0400-0001, nr_bits becomes 64), stack corruption may occur due to bpf_probe_read_kernel_common(..., nr_bytes = 0x2000-0008). Fix it by limiting the maximum value of nr_words to 511. The value is derived from the current implementation of BPF memory allocator. To ensure compatibility if the BPF memory allocator's size limitation changes in the future, use the helper bpf_mem_alloc_check_size() to check whether nr_bytes is too larger. And return -E2BIG instead of -ENOMEM for oversized nr_bytes.

• https://git.kernel.org/stable/c/393397fbdcad7396639d7077c33f86169184ba99Patch
• https://git.kernel.org/stable/c/c9539e09c67880ecd88b51188c346a2cc078b06cPatch

Published

Nov 9, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50248In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50249In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5025The Memberpress plugin for WordPress is vulnerable to Stored…5.4
• CVE-2024-50250In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-50251In the Linux kernel, the following vulnerability has been re…6.2
• CVE-2024-50252In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50254In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50255In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50256In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50257In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-50258In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50259In the Linux kernel, the following vulnerability has been re…5.5