CVE-2024-40996
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
bpf: Avoid splat in pskb_pull_reason
In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid splat in pskb_pull_reason syzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debug hint in pskb_may_pull. We'd like to retain this debug check because it might hint at integer overflows and other issues (kernel code should pull headers, not huge value). In bpf case, this splat isn't interesting at all: such (nonsensical) bpf programs are typically generated by a fuzzer anyway. Do what Eric suggested and suppress such warning. For CONFIG_DEBUG_NET=n we don't need the extra check because pskb_may_pull will do the right thing: return an error without the WARN() backtrace.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8af60bb2b215f478b886f1d6d302fefa7f0b917d | affected | git | dacc15e9cb248d19e5fc63c54bef0b9b55007761 | Unavailable | None listed |
| 1b2b26595bb09febf14c5444c873ac4ec90a5a77 | affected | git | 7f9644782c559635bd676c12c59389a34ed7c866 | Unavailable | None listed |
| 219eee9c0d16f1b754a8b85275854ab17df0850a | affected | git | 5e90258303a358e88737afb5048bee9113beea3a | Unavailable | None listed |
| 219eee9c0d16f1b754a8b85275854ab17df0850a | affected | git | 2bbe3e5a2f4ef69d13be54f1cf895b4658287080 | Unavailable | None listed |
| fff05b2b004d9a8a2416d08647f3dc9068e357c8 | affected | git | Unavailable | Unavailable | None listed |
| 6.1.86 | affected | semver | 6.1.96 | Unavailable | None listed |
| 6.6.27 | affected | semver | 6.6.36 | Unavailable | None listed |
| 6.8.6 | affected | semver | 6.9 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.9 | Unavailable | None listed |
| 6.1.96 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.36 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.9.7 | unaffected | semver | Unavailable | 6.9.* | None listed |
| 6.10 | unaffected | original_commit_for_fix | Unavailable | * | None listed |