CVE-2024-56720

Summary

CVE-2024-56720 is a vulnerability affecting the Linux kernel's bpf and sockmap components. Several issues were identified and addressed in the function bpf_msg_pop_data. Specifically, in sk_msg_shift_left, there were failures to properly handle the shifting of data and the subsequent allocation of memory. These issues could result in buffer overflows or memory leaks. Additionally, a variable "a" and the use of sk_msg_iter_var_next were found to be problematic, potentially leading to bugs. The vulnerabilities have been mitigated through various fixes, including the proper use of put_page, early returns when length is zero, and proper handling of shifting and next pointers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.