CVE-2024-36481

medium

Description

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: fix error check in parse_btf_field() btf_find_struct_member() might return NULL or an error via the ERR_PTR() macro. However, its caller in parse_btf_field() only checks for the NULL condition. Fix this by using IS_ERR() and returning the error up the stack.

References

https://git.kernel.org/stable/c/e569eb34970281438e2b48a3ef11c87459fcfbcb

https://git.kernel.org/stable/c/ad4b202da2c498fefb69e5d87f67b946e7fe1e6a

https://git.kernel.org/stable/c/4ed468edfeb54c7202e559eba74c25fac6a0dad0

Details

Source: Mitre, NVD

Published: 2024-06-21

Updated: 2024-06-24

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium