CVE-2024-26591

Summary

CVE-2024-26591 is a Linux kernel vulnerability that, if exploited, can result in a NULL pointer dereference, causing a system crash. The issue arises when loading and attaching BPF programs in a specific order. The vulnerability occurs due to missing attach_btf, resulting in prog->aux->dst_trampoline, tgt_prog, prog->aux->attach_btf, and the program being loaded for tgt_prog all being NULL. This leads to a kernel panic with the message "BUG: kernel NULL pointer dereference, address: 0000000000000058." The vulnerability can be mitigated by returning -EINVAL in the affected situation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.