CVE - CVE-2024-42161

CVE-ID
CVE-2024-42161	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - Use a default branch in the switch statement to initialize `val'.] GCC warns that `val' may be used uninitialized in the BPF_CRE_READ_BITFIELD macro, defined in bpf_core_read.h as: [...] unsigned long long val; \ [...] \ switch (__CORE_RELO(s, field, BYTE_SIZE)) { \ case 1: val = (const unsigned char )p; break; \ case 2: val = (const unsigned short )p; break; \ case 4: val = (const unsigned int )p; break; \ case 8: val = (const unsigned long long )p; break; \ } \ [...] val; \ } \ This patch adds a default entry in the switch statement that sets `val' to zero in order to avoid the warning, and random values to be used in case __builtin_preserve_field_info returns unexpected values for BPF_FIELD_BYTE_SIZE. Tested in bpf-next master. No regressions.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/009367099eb61a4fc2af44d4eb06b6b4de7de6db URL:https://git.kernel.org/stable/c/009367099eb61a4fc2af44d4eb06b6b4de7de6db MISC:https://git.kernel.org/stable/c/3364c2ed1c241989847f19cf83e3db903ce689e3 URL:https://git.kernel.org/stable/c/3364c2ed1c241989847f19cf83e3db903ce689e3 MISC:https://git.kernel.org/stable/c/7e5471b5efebc30dd0bc035cda86693a5c73d45f URL:https://git.kernel.org/stable/c/7e5471b5efebc30dd0bc035cda86693a5c73d45f MISC:https://git.kernel.org/stable/c/a21d76bd0b0d39518e9a4c19f6cf7c042a974aff URL:https://git.kernel.org/stable/c/a21d76bd0b0d39518e9a4c19f6cf7c042a974aff MISC:https://git.kernel.org/stable/c/b694989bb13ed5f166e633faa1eb0f21c6d261a6 URL:https://git.kernel.org/stable/c/b694989bb13ed5f166e633faa1eb0f21c6d261a6 MISC:https://git.kernel.org/stable/c/ff941a8449e712eaf7efca1a13bfb9afd3d99fc2 URL:https://git.kernel.org/stable/c/ff941a8449e712eaf7efca1a13bfb9afd3d99fc2
Assigning CNA
kernel.org
Date Record Created
20240729	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240729)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)