cve 2024 42068

About this tag
CVE-2024-42068 is a Linux kernel vulnerability in the BPF subsystem where the function bpf_prog_lock_ro() fails to check the return value of set_memory_ro(). When set_memory_ro() fails, memory pages intended to be read-only remain writable, violating kernel memory protection assumptions. This can lead to system crashes or denial-of-service conditions until the host is patched or rebooted. The vulnerability is considered a practical availability risk that administrators should address promptly. Discussions on WindowsForum cover the technical details, impact, and mitigation steps for this CVE.

  1. CVE-2024-42068: Linux Kernel BPF Unchecked set_memory_ro Risks Availability

    A small, easily overlooked change in the Linux kernel’s BPF subsystem — tracked as CVE‑2024‑42068 — exposed a window where pages intended to be protected as read‑only could remain writable, creating a practical availability risk that administrators should treat seriously: unhandled failures from...