CVE-2024-2314

EUVD-2024-27269
If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.8 LOW
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
Affected Products (NVD)
VendorProductVersion
iovisorbpf_compiler_collection
𝑥
< 0.30.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bpfcc
bookworm
unimportant
bullseye
unimportant
buster
not-affected
forky
0.35.0+ds-1
fixed
sid
0.35.0+ds-1
fixed
trixie
0.31.0+ds-7
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bpfcc
bionic
not-affected
focal
not-affected
jammy
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
dne
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
bcc
RHEL 8
0:0.25.0-9.el8_10
fixed
RHEL 9
0:0.30.0-6.el9
fixed
bcc-devel
RHEL 8
0:0.25.0-9.el8_10
fixed
RHEL 9
0:0.30.0-6.el9
fixed
bcc-doc
RHEL 8
0:0.25.0-9.el8_10
fixed
RHEL 9
0:0.30.0-6.el9
fixed
bcc-tools
RHEL 8
0:0.25.0-9.el8_10
fixed
RHEL 9
0:0.30.0-6.el9
fixed
libbpf-tools
RHEL 9
0:0.30.0-6.el9
fixed
python3-bcc
RHEL 8
0:0.25.0-9.el8_10
fixed
RHEL 9
0:0.30.0-6.el9
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
bcc
Amazon Linux 2
0:0.24.0-3.amzn2.0.5
fixed
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
bcc-debuginfo
Amazon Linux 2
0:0.24.0-3.amzn2.0.5
fixed
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
bcc-debugsource
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
bcc-devel
Amazon Linux 2
0:0.24.0-3.amzn2.0.5
fixed
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
bcc-doc
Amazon Linux 2
0:0.24.0-3.amzn2.0.5
fixed
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
bcc-tools
Amazon Linux 2
0:0.24.0-3.amzn2.0.5
fixed
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
bcc-tools-debuginfo
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
libbpf-tools
Amazon Linux 2
0:0.24.0-3.amzn2.0.5
fixed
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
libbpf-tools-debuginfo
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
python3-bcc
Amazon Linux 2
0:0.24.0-3.amzn2.0.5
fixed
Amazon Linux 2023
0:0.26.0-1.amzn2023.0.2
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
bcc
Azure Linux 3.0
0:0.29.1-2.azl3
fixed