CVE-2024-27050

A vulnerability was found in the Linux kernel’s bpf_xdp_query() function, where an out-of-bounds write error can occur due to a misalignment between the older and newer versions of the bpf_xdp_query_opts structure. This issue occurs when an older version of libbpf interacts with a newer version, leading to stack corruption because the latest version of the structure introduced new fields, feature_flags, and xdp_zc_max_segs. As such, the older version, which has smaller struct sizes, may have its stack corrupted by the newer version writing beyond the allocated space. This vulnerability can lead to memory corruption or system instability.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation is limited to a local denial of service within user-space applications. The flaw manifests only when a local program compiled against older libbpf structure definitions calls the XDP query interface on a system with a mismatched newer library version. Because the resulting memory corruption is confined to the address space of the executing user process and does not facilitate privilege escalation into kernel space or permit remote access, the overall risk is constrained.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.