CVEvulnerability

CVE-2024-2314

2.5 LOW Published 2024-03-10 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.8 LOW — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
CVSS 3.1 ([email protected])
2.5 LOW — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

Affected configurations

• iovisor bpf compiler collection (< 0.30.0)

References