CVE-2024-58100

In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changes_pkt_data property of the global sub-program. Because of this, an extension program replacing a global sub-program must be compatible with changes_pkt_data property of the sub-program being replaced. This commit: - adds changes_pkt_data flag to struct bpf_prog_aux: - this flag is set in check_cfg() for main sub-program; - in jit_subprogs() for other sub-programs; - modifies bpf_check_attach_btf_id() to check changes_pkt_data flag; - moves call to check_attach_btf_id() after the call to check_cfg(), because it needs changes_pkt_data flag to be set: bpf_check: ... ... - check_attach_btf_id resolve_pseudo_ldimm64 resolve_pseudo_ldimm64 --> bpf_prog_is_offloaded bpf_prog_is_offloaded check_cfg check_cfg + check_attach_btf_id ... ... The following fields are set by check_attach_btf_id(): - env->ops - prog->aux->attach_btf_trace - prog->aux->attach_func_name - prog->aux->attach_func_proto - prog->aux->dst_trampoline - prog->aux->mod - prog->aux->saved_dst_attach_type - prog->aux->saved_dst_prog_type - prog->expected_attach_type Neither of these fields are used by resolve_pseudo_ldimm64() or bpf_prog_offload_verifier_prep() (for netronome and netdevsim drivers), so the reordering is safe.

• https://git.kernel.org/stable/c/3846e2bea565ee1c5195dcc625fda9868fb0e3b3Patch
• https://git.kernel.org/stable/c/7197fc4acdf238ec8ad06de5a8235df0c1f9c7d7Patch
• https://git.kernel.org/stable/c/81f6d0530ba031b5f038a091619bf2ff29568852Patch

Published

May 5, 2025

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-58095In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58096In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58097In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58098In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58099In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5810The WP2Speed Faster – Optimize PageSpeed Insights Score 90-1…5.3
• CVE-2024-58101Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Blue…8.1
• CVE-2024-58102An issue was discovered in Datalust Seq before 2024.3.13545.…6.5
• CVE-2024-58103Square Wire before 5.2.0 does not enforce a recursion limit …5.8
• CVE-2024-58104A vulnerability in the Trend Micro Apex One Security Agent …7.8
• CVE-2024-58105A vulnerability in the Trend Micro Apex One Security Agent …7.8
• CVE-2024-58106Buffer overflow vulnerability in the codec module Impact: Su…7.5