CVE-2024-58100

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

bpf: check changes_pkt_data property for extension programs

When processing calls to global sub-programs, verifier decides whether

to invalidate all packet pointers in current state depending on the

changes_pkt_data property of the global sub-program.

Because of this, an extension program replacing a global sub-program

must be compatible with changes_pkt_data property of the sub-program

being replaced.

This commit:

- adds changes_pkt_data flag to struct bpf_prog_aux:

- this flag is set in check_cfg() for main sub-program;

- in jit_subprogs() for other sub-programs;

- modifies bpf_check_attach_btf_id() to check changes_pkt_data flag;

- moves call to check_attach_btf_id() after the call to check_cfg(),

because it needs changes_pkt_data flag to be set:

bpf_check:

... ...

- check_attach_btf_id resolve_pseudo_ldimm64

resolve_pseudo_ldimm64 --> bpf_p

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References