Memory Management Weakness in Linux Kernel's bpf Struct Operations

CVE-2024-58060

Summary

A vulnerability in the Linux Kernel's bpf struct operations can result in improper memory management. Specifically, a Use After Free (UAF) condition arises when the configuration option CONFIG_MODULES is disabled, leading to unresolved symbols during module refcounting. This issue affects struct_ops with a 'struct module *owner' member. The registration of bpf_struct_ops is disabled when the module btf_id is missing, preventing erroneous reference counting and enhancing the overall integrity of memory management in the kernel.

References