https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 10:35:00 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:8830 <p><strong>Affected:</strong> AlmaLinux:8: bpftrace</p> <p>BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap</p> <p>Security Fix(es):</p> <p>* bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: bpftrace</p> <p>BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter (eBPF) available in recent Linux kernels (4.x). BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing capabilities: kernel dynamic tracing (kprobes), user-level dynamic tracing (uprobes), and tracepoints. The BPFtrace language is inspired by awk and C, and predecessor tracers such as DTrace and SystemTap</p> <p>Security Fix(es):</p> <p>* bpftrace: unprivileged users can force loading of compromised linux headers (CVE-2024-2313)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:8830 https://cve.radiocsirt.org/vuln/euvd-2026-222683 EUVD-2026-222683 https://cve.radiocsirt.org/vuln/euvd-2026-222683 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2313 <p>If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.</p> <p>If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2313 https://cve.radiocsirt.org/vuln/ghsa-ph92-w482-m4jj <p>If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.</p> <p>If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.</p> https://cve.radiocsirt.org/vuln/ghsa-ph92-w482-m4jj https://cve.radiocsirt.org/vuln/gsd-2024-2313 gsd-2024-2313 https://cve.radiocsirt.org/vuln/gsd-2024-2313 https://cve.radiocsirt.org/vuln/msrc_cve-2024-2313 msrc_CVE-2024-2313 https://cve.radiocsirt.org/vuln/msrc_cve-2024-2313 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13986-1 <p>bpftrace-0.20.4-1.1 on GA media</p> <p>bpftrace-0.20.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13986-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3333 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux im BPFtrace- und BCC-Toolset ausnutzen, um Dateien zu manipulieren.</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux im BPFtrace- und BCC-Toolset ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3333