CVE-2024-41003

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) verifier. When evaluating conditional branch instructions against constant values, the verifier incorrectly shared internal register state across different execution paths, resulting in corrupted register bounds tracking. A local user permitted to load BPF programs could exploit this flaw by loading a specially crafted program to bypass kernel safety checks, potentially leading to privilege escalation or a Denial of Service (DoS).

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires privileged capabilities to load Berkeley Packet Filter (BPF) programs. By default on Red Hat Enterprise Linux, unprivileged access to BPF is disabled via the kernel.unprivileged_bpf_disabled sysctl parameter. Consequently, an attacker must already possess administrative permissions (such as CAP_BPF or CAP_SYS_ADMIN) to trigger this flaw, significantly reducing exposure to unprivileged local attackers.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.