kraj / meta-clang

Clang C/C++ cross compiler and runtime for OpenEmbedded/Yocto Project
MIT License
151 stars 192 forks source link

bpftrace: fix CVE-2024-2313.patch #953

Closed meenaligupta159 closed 3 weeks ago

meenaligupta159 commented 3 weeks ago

If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.