CVE-2024-2314

bcc-doc: BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs

CVE-2024-2314 is fixed in 11 products on 1 platform, first by DEBIAN-CVE-2024-2314, released March 10, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
2.8
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0022
12th percentile

BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool. Security Fix(es): * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
bcc · RHEL 8 0:0.25.0-9.el8_10 RHSA-2024:8831 Nov 5, 2024
bcc · RHEL 9 0:0.30.0-6.el9 RHSA-2024:9187 Nov 12, 2024
bcc · almalinux 9 0.30.0-6.el9 ALSA-2024:9187 Nov 12, 2024
bcc · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
bcc · ol 8 0:0.25.0-9.el8_10 ELSA-2024-8831 Nov 5, 2024
bcc · ol 9 0:0.30.0-6.el9 ELSA-2024-9187 Nov 14, 2024
bcc · rocky 8 0:0.25.0-9.el8_10 RLSA-2024:8831 Nov 8, 2024
bcc-debuginfo · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
bcc-debugsource · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
bcc-devel · RHEL 8 0:0.25.0-9.el8_10 RHSA-2024:8831 Nov 5, 2024
bcc-devel · RHEL 9 0:0.30.0-6.el9 RHSA-2024:9187 Nov 12, 2024
bcc-devel · almalinux 8 0.25.0-9.el8_10 ALSA-2024:8831 Nov 5, 2024
bcc-devel · almalinux 9 0.30.0-6.el9 ALSA-2024:9187 Nov 12, 2024
bcc-devel · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
bcc-devel · ol 8 0:0.25.0-9.el8_10 ELSA-2024-8831 Nov 5, 2024
bcc-devel · ol 9 0:0.30.0-6.el9 ELSA-2024-9187 Nov 14, 2024
bcc-doc · RHEL 8 0:0.25.0-9.el8_10 RHSA-2024:8831 Nov 5, 2024
bcc-doc · RHEL 9 0:0.30.0-6.el9 RHSA-2024:9187 Nov 12, 2024
bcc-doc · almalinux 8 0.25.0-9.el8_10 ALSA-2024:8831 Nov 5, 2024
bcc-doc · almalinux 9 0.30.0-6.el9 ALSA-2024:9187 Nov 12, 2024
bcc-doc · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
bcc-doc · ol 8 0:0.25.0-9.el8_10 ELSA-2024-8831 Nov 5, 2024
bcc-doc · ol 9 0:0.30.0-6.el9 ELSA-2024-9187 Nov 14, 2024
bcc-tools · RHEL 8 0:0.25.0-9.el8_10 RHSA-2024:8831 Nov 5, 2024
bcc-tools · RHEL 9 0:0.30.0-6.el9 RHSA-2024:9187 Nov 12, 2024
bcc-tools · almalinux 9 0.30.0-6.el9 ALSA-2024:9187 Nov 12, 2024
bcc-tools · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
bcc-tools · ol 8 0:0.25.0-9.el8_10 ELSA-2024-8831 Nov 5, 2024
bcc-tools · ol 9 0:0.30.0-6.el9 ELSA-2024-9187 Nov 14, 2024
bcc-tools-debuginfo · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
bpfcc · Debian 13.5 (trixie) 0.31.0+ds-2 DEBIAN-CVE-2024-2314 Mar 10, 2024
bpfcc · Debian 14 0.31.0+ds-2 DEBIAN-CVE-2024-2314 Mar 10, 2024
libbpf-tools · RHEL 9 0:0.30.0-6.el9 RHSA-2024:9187 Nov 12, 2024
libbpf-tools · almalinux 9 0.30.0-6.el9 ALSA-2024:9187 Nov 12, 2024
libbpf-tools · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
libbpf-tools · ol 9 0:0.30.0-6.el9 ELSA-2024-9187 Nov 14, 2024
libbpf-tools-debuginfo · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
python3-bcc · RHEL 8 0:0.25.0-9.el8_10 RHSA-2024:8831 Nov 5, 2024
python3-bcc · RHEL 9 0:0.30.0-6.el9 RHSA-2024:9187 Nov 12, 2024
python3-bcc · almalinux 9 0.30.0-6.el9 ALSA-2024:9187 Nov 12, 2024
python3-bcc · amzn 2023 0.26.0-1.amzn2023.0.2 ALAS2023-2024-626 May 23, 2024
python3-bcc · ol 8 0:0.25.0-9.el8_10 ELSA-2024-8831 Nov 5, 2024
python3-bcc · ol 9 0:0.30.0-6.el9 ELSA-2024-9187 Nov 14, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.