CVE-2024-26588
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 22, 2024
Updated: Mar 18, 2024
CWE ID 119
Summary
CVE-2024-26588 is a vulnerability affecting the Linux kernel on LoongArch processors. It involves an out-of-bounds memory access issue in the BPF (Berkeley Packet Filter) subsystem. Specifically, the test_tag test triggers an unhandled page fault when loading a BPF program with a large number of instructions, leading to a kernel panic. This vulnerability can potentially be exploited by malicious actors to execute arbitrary code or cause a denial-of-service condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Linux Kernel
Affected Vendors
- LINUX