CVE-2024-42072

Summary

CVE-2024-42072 is a vulnerability affecting the Linux kernel. It was identified that the function "may_goto" had an issue with handling negative offsets. This problem was exploited by Zac's syzbot, revealing two distinct bugs. The first bug lies in the way "may_goto" is patched when the offset is negative, requiring a different approach. The second issue is located in the verifier. When the "may_goto_depth" of the current state equals that of the visited state, it indicates an infinite loop. However, pruning the exploration of the program at this point is incorrect, as there may be multiple "may_goto" instructions, each incrementing the depth only in the queued state. The current state will always have a depth of 0, necessitating the verification of the entire program until reaching "bpf_exit".

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.