CVE-2024-58060

一、漏洞信息
 漏洞编号：[CVE-2024-58060](https://nvd.nist.gov/vuln/detail/CVE-2024-58060)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.1.8,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：7.8 High
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missingThere is a UAF report in the bpf_struct_ops when CONFIG_MODULES=n.In particular, the report is on tcp_congestion_ops that hasa  struct module *owner  member.For struct_ops that has a  struct module *owner  member,it can be extended either by the regular kernel module orby the bpf_struct_ops. bpf_try_module_get() will be usedto do the refcounting and different refcount is donebased on the owner pointer. When CONFIG_MODULES=n,the btf_id of the  struct module  is missing:WARN: resolve_btfids: unresolved symbol moduleThus, the bpf_try_module_get() cannot do the correct refcounting.Not all subsystem s struct_ops requires the  struct module *owner  member.e.g. the recent sched_ext_ops.This patch is to disable bpf_struct_ops registration ifthe struct_ops has the  struct module *  member and the struct module  btf_id is missing. The btf_type_is_fwd() helperis moved to the btf.h header file for this test.This has happened since the beginning of bpf_struct_ops which has gonethrough many changes. The Fixes tag is set to a recent commit that thispatch can apply cleanly. Considering CONFIG_MODULES=n is notcommon and the age of the issue, targeting for bpf-next also.
 漏洞公开时间：2025-03-07 00:15:52
 漏洞创建时间：2025-03-07 01:02:22
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-58060
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/2324fb4e92092837ee278fdd8d60c48ee1a619ce |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/96ea081ed52bf077cad6d00153b6fba68e510767 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b777b14c2a4a4e2322daf8e8ffd42d2b88831b17 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-58060 | https://bugzilla.suse.com/show_bug.cgi?id=1238967 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-58060 | https://bugzilla.suse.com/show_bug.cgi?id=1238967 |
| suse_bugzilla | https://git.kernel.org/stable/c/2324fb4e92092837ee278fdd8d60c48ee1a619ce | https://bugzilla.suse.com/show_bug.cgi?id=1238967 |
| suse_bugzilla | https://git.kernel.org/stable/c/96ea081ed52bf077cad6d00153b6fba68e510767 | https://bugzilla.suse.com/show_bug.cgi?id=1238967 |
| suse_bugzilla | https://git.kernel.org/stable/c/b777b14c2a4a4e2322daf8e8ffd42d2b88831b17 | https://bugzilla.suse.com/show_bug.cgi?id=1238967 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025030608-CVE-2024-58060-e849@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2350371 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2024-58060 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://git.kernel.org/stable/c/2324fb4e92092837ee278fdd8d60c48ee1a619ce |  | nvd |
|  |  | https://git.kernel.org/stable/c/96ea081ed52bf077cad6d00153b6fba68e510767 |  | nvd |
|  |  | https://git.kernel.org/stable/c/b777b14c2a4a4e2322daf8e8ffd42d2b88831b17 |  | nvd |
| linux_kernel | 6.12.13 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b777b14c2a4a4e2322daf8e8ffd42d2b88831b17Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1611603537a4b88cec7993f32b70c03113801a46 | linuxkernelcves |
| linux_kernel | 6.13.2 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2324fb4e92092837ee278fdd8d60c48ee1a619ceIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1611603537a4b88cec7993f32b70c03113801a46 | linuxkernelcves |
| linux_kernel | 6.14-rc1 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=96ea081ed52bf077cad6d00153b6fba68e510767Please | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1611603537a4b88cec7993f32b70c03113801a46 | linuxkernelcves |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  Reserved.
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP4(4.19.90):不受影响
2.openEuler-22.03-LTS-SP3(5.10.0):不受影响
3.openEuler-22.03-LTS-SP4(5.10.0):不受影响
4.master(6.6.0):不受影响
5.openEuler-24.03-LTS(6.6.0):不受影响
6.openEuler-24.03-LTS-Next(6.6.0):不受影响
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响
8.openEuler-24.03-LTS-SP2(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP4(4.19.90):否
2.openEuler-22.03-LTS-SP3(5.10.0):否
3.master(6.6.0):否
4.openEuler-24.03-LTS(6.6.0):否
5.openEuler-24.03-LTS-Next(6.6.0):否
6.openEuler-22.03-LTS-SP4(5.10.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否
8.openEuler-24.03-LTS-SP2(6.6.0):否

原因说明：
  1.master(6.6.0):不受影响-漏洞代码不能被攻击者触发
2.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
3.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在
4.openEuler-22.03-LTS-SP3(5.10.0):不受影响-漏洞代码不存在
5.openEuler-22.03-LTS-SP4(5.10.0):不受影响-漏洞代码不存在
6.openEuler-24.03-LTS(6.6.0):不受影响-漏洞代码不存在
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响-漏洞代码不存在
8.openEuler-24.03-LTS-SP2(6.6.0):不受影响-漏洞代码不存在

src-openEuler/kernel

Content Risk Flag

Comments (9)

src-openEuler/kernel .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2024-58060

Comments (9)

Search

src-openEuler/kernel