| Name | CVE-2024-2313 |
| Description | If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 1071748 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| bpftrace (PTS) | bullseye | 0.11.3-5+deb11u1 | vulnerable |
| bookworm | 0.17.0-1 | vulnerable |
| trixie | 0.20.2-1 | vulnerable |
| sid | 0.21.2-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| bpftrace | source | buster | (not affected) | | | |
| bpftrace | source | (unstable) | 0.21.0-1 | | | 1071748 |
Notes
[bookworm] - bpftrace <no-dsa> (Minor issue)
[bullseye] - bpftrace <no-dsa> (Minor issue)
[buster] - bpftrace <not-affected> (Vulnerable code introduced later)
Introduced by: https://github.com/bpftrace/bpftrace/commit/896fafbe925385500c6626b19348739142944b88 (v0.9.3)
Fixed by: https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998 (v0.21.0)