Fix out-of-bounds write in trie_get_next_key()

CVE-2024-50262

What is CVE-2024-50262?

The Linux kernel features a vulnerability within the BPF (Berkeley Packet Filter) module specifically in the trie_get_next_key() function, where an out-of-bounds write occurs. This function allocates a node stack based on trie->max_prefixlen but incorrectly writes nodes exceeding this limit. For instance, if the max_prefixlen is set to 8, inserting keys with a prefix of 0x00/0 through 0x00/8 attempts to write 9 nodes to the stack instead of the allocated 8. This flaw may lead to unintended memory corruption, potentially impacting system stability and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References