Most recent entries from all

ALSA-2024:8831 — Low: bcc security update

Affected: AlmaLinux:8: bcc-devel, AlmaLinux:8: bcc-doc

BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.

Security Fix(es):

* bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2024-2314

Affected: Alpaquita:23: bcc, Alpaquita:stream: bcc

EUVD-2026-198608

fkie_cve-2024-2314

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

GHSA-883r-qq2g-w5xj

gsd-2024-2314

msrc_CVE-2024-2314 — If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attac…

msrc_CVE-2024-2314

OESA-2024-2502 — bcc security update

Affected: openEuler:24.03-LTS: bcc

BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known as eBPF, a new feature that was first added to Linux 3.15. BCC makes BPF programs easier to write, with kernel instrumentation in C (and includes a C wrapper around LLVM), and front-ends in Python and lua. It is suited for many tasks, including performance analysis and network traffic control. Security Fix(es): If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.(CVE-2024-2314)

RHSA-2024:8831 — Red Hat Security Advisory: bcc security update

bcc: unprivileged users can force loading of compromised linux headers

WID-SEC-W-2024-3333 — Red Hat Enterprise Linux: Schwachstellen ermöglichen Manipulation von Dateien

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux im BPFtrace- und BCC-Toolset ausnutzen, um Dateien zu manipulieren.