CVE-2024-36918
bpf: Check bloom filter map value size
At a glance Severity HIGH 7.8 EPSS EPSS 0.24 % · percentile 15 (2026-10-27) State PUBLISHED Published 2024-05-30 Updated 2026-08-05 Assigner Linux NVD status Modified Description In the Linux kernel, the following vulnerability has been resolved:
bpf: Check bloom filter map value size
This patch adds a missing check to bloom filter creating, rejecting
values above KMALLOC_MAX_SIZE. This brings the bloom map in line with
many other map types.
The lack of this protection can cause kernel crashes for value sizes
that overflow int's. Such a crash was caught by syzkaller. The next
patch adds more guard-rails at a lower level.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Linux CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) CVSS 3.1 MEDIUM 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.16 < 6.1.91cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.2 < 6.6.31cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.7 < 6.8.10cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*Affected products Product Versions Linux · Linux affected 9330986c03006ab1d33d243b7cfe598a7a3c1baa < fa6995eeb62e74b5a1480c73fb7b420c270784d3 ; affected 9330986c03006ab1d33d243b7cfe598a7a3c1baa < 608e13706c8b6c658a0646f09ebced74ec367f7c ; affected 9330986c03006ab1d33d243b7cfe598a7a3c1baa < c418afb9bf23e2f2b76cb819601e4a5d9dbab42d ; affected 9330986c03006ab1d33d243b7cfe598a7a3c1baa < a8d89feba7e54e691ca7c4efc2a6264fa83f3687 Linux · Linux affected 5.16 ; unaffected 0 < 5.16 ; unaffected 6.1.91 ≤ 6.1.* ; unaffected 6.6.31 ≤ 6.6.* ; unaffected 6.8.10 ≤ 6.8.* ; unaffected 6.9 ≤ *
References
Sources
