CVE-2024-42067

Summary

CVE-2024-42067 is a newly identified vulnerability affecting the Linux kernel. The issue lies in the bpf (Berkeley Packet Filter) subsystem, specifically with the functions set_memory_rox() and bpf_jit_binary_lock_ro(). When set_memory_rox() fails to protect memory as intended, bpf_jit_binary_lock_ro() can inadvertently use unprotected memory. This vulnerability can potentially lead to arbitrary code execution with kernel privileges. To mitigate this risk, Linux distributions are advised to apply the appropriate patches as soon as they become available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.