kraj / meta-clang

Clang C/C++ cross compiler and runtime for OpenEmbedded/Yocto Project
MIT License
151 stars 192 forks source link

bpftrace: fix CVE-2024-2313 #952

Closed meenaligupta159 closed 3 weeks ago

meenaligupta159 commented 3 weeks ago

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

kraj commented 3 weeks ago

Thanks @meenaligupta159, i see the PR is against master branch is that correct ? secondly, please squash both commits into one and for push to your branch