BaselineWatch
Desk

CVE-2024-42067

5.5 medium SSVC exploitation: none Modified

In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() set_memory_rox() can fail, leaving memory unprotected. Check return and bail out when bpf_jit_binary_lock_ro() returns an error.

Fix

Patch, vendor advisory and mitigation references on NVD 6

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 6

  1. CwesCWE-252NVD modified 2026-10-21 13:17
  2. References+2 references (now 7)NVD modified 2026-10-21 13:17
  3. Cpes+1 CPE criteria (now 1)NVD modified 2026-10-21 13:17
  4. StatusPublished → ModifiedNVD modified 2026-10-21 13:17
  5. CVSS7.8 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) → 5.5 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)NVD modified 2026-10-21 13:17
  6. First seenCVSS 7.8 · linuxNVD modified 2026-10-21 12:34

Affected (CPE criteria) 1

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

References 7