{
  "cveId": "CVE-2024-40996",
  "url": "https://patchblox.com/security/cve/CVE-2024-40996",
  "summary": "CVE-2024-40996 is fixed in 22 products on 1 platform, first by DEBIAN-CVE-2024-40996, released July 12, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Avoid splat in pskb_pull_reason  syzkaller...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  bpf: Avoid splat in pskb_pull_reason  syzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debug hint in pskb_may_pull.  We\u0027d like to retain this debug check because it might hint at integer overflows and other issues (kernel code should pull headers, not huge value).  In bpf case, this splat isn\u0027t interesting at all: such (nonsensical) bpf programs are typically generated by a fuzzer anyway.  Do what Eric suggested and suppress such warning.  For CONFIG_DEBUG_NET=n we don\u0027t need the extra check because pskb_may_pull will do the right thing: return an error without the WARN() backtrace.",
  "published": "2024-07-12T13:15:20Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00279,
  "epssPercentile": 0.20493,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.96-102.177",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.99-1",
      "fix": "DEBIAN-CVE-2024-40996",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-40996",
      "released": "2024-07-12T13:15:20Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.9.7-1",
      "fix": "DEBIAN-CVE-2024-40996",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-40996",
      "released": "2024-07-12T13:15:20Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.9.7-1",
      "fix": "DEBIAN-CVE-2024-40996",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-40996",
      "released": "2024-07-12T13:15:20Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.96-102.177.amzn2023",
      "fix": "ALAS2023-2025-836",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-836",
      "released": "2025-01-30T03:53:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}