CVE-2024-42161

bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

MEDIUM
6.3
CVSS Score
Published: July 30, 2024 at 07:47 AM UTC
Updated: June 17, 2026 at 07:48 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.3
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - Use a default branch in the switch statement to initialize `val'.] GCC warns that `val' may be used uninitialized in the BPF_CRE_READ_BITFIELD macro, defined in bpf_core_read.h as: [...] unsigned long long val; \ [...] \ switch (__CORE_RELO(s, field, BYTE_SIZE)) { \ case 1: val = *(const unsigned char *)p; break; \ case 2: val = *(const unsigned short *)p; break; \ case 4: val = *(const unsigned int *)p; break; \ case 8: val = *(const unsigned long long *)p; break; \ } \ [...] val; \ } \ This patch adds a default entry in the switch statement that sets `val' to zero in order to avoid the warning, and random values to be used in case __builtin_preserve_field_info returns unexpected values for BPF_FIELD_BYTE_SIZE. Tested in bpf-next master. No regressions.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.10.2225.11 ≤ v < 5.15.1635.16 ≤ v < 6.1.985.5 ≤ v < 5.10.2225.5 ≤ v < 5.15.1635.5 ≤ v < 6.1.985.5 ≤ v < 6.105.5 ≤ v < 6.6.395.5 ≤ v < 6.9.96.2 ≤ v < 6.6.396.7 ≤ v < 6.9.95.5ee26dade0e3bcd8a34ae7520e373fb69365fce7a
Vendor states this is fixed in 009367099eb61a4fc2af44d4eb06b6b4de7de6db (fixed)
Vendor states this is fixed in 3364c2ed1c241989847f19cf83e3db903ce689e3 (fixed)
Vendor states this is fixed in 7e5471b5efebc30dd0bc035cda86693a5c73d45f (fixed)
Vendor states this is fixed in a21d76bd0b0d39518e9a4c19f6cf7c042a974aff (fixed)
Vendor states this is fixed in b694989bb13ed5f166e633faa1eb0f21c6d261a6 (fixed)
Vendor states this is fixed in ff941a8449e712eaf7efca1a13bfb9afd3d99fc2 (fixed)
Vendor states this is fixed in 5.10.222 (unaffected)
Vendor states this is fixed in 5.15.163 (unaffected)
Vendor states this is fixed in 5.5 (unaffected)
Vendor states this is fixed in 6.1.98 (unaffected)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.6.39 (unaffected)
Vendor states this is fixed in 6.9.9 (unaffected)

References (7)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/009367099eb61a4fc2af44d4eb06b6b4de7de6db
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/3364c2ed1c241989847f19cf83e3db903ce689e3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7e5471b5efebc30dd0bc035cda86693a5c73d45f
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/a21d76bd0b0d39518e9a4c19f6cf7c042a974aff
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b694989bb13ed5f166e633faa1eb0f21c6d261a6
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ff941a8449e712eaf7efca1a13bfb9afd3d99fc2
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-908

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card