VULNERABILITY INTELLIGENCE

CVE-2024-2313

CVSS score2.8 LOW
EPSS probability0.18%
CISA KEVNot currently listed
Published2024-03-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L

Description

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-377

Primary references