CVE-2024-42068

Summary

CVE-2024-42068 is a newly identified vulnerability in the Linux kernel. This issue lies in the bpf (Berkeley Packet Filter) subsystem, where a failure in set_memory_ro() can leave memory unprotected. The function set_memory_ro() is responsible for marking memory as read-only. However, if it fails, the memory remains writeable, and the bpf_prog_lock_ro() function does not account for this possibility. This oversight could potentially allow unauthorized modifications to memory areas intended to be read-only. Linux kernel users are advised to apply the relevant patch to mitigate this security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.