[CLSA-2026:1789740903] bcc: Fix of CVE-2024-2314
Type:
security
Severity:
Low
Release date:
2026-09-18 14:15:15 UTC
Description:
- CVE-2024-2314: missing ownership check on the extracted kernel-header cache in get_proc_kheaders() lets a local user seed /tmp/kheaders- and inject headers into a privileged bcc compile
CVEs fixed:
Updated packages:
  • bcc-0.25.0-2.el9_2.tuxcare.els1.x86_64.rpm
    sha:3d8ae7f25af5b0451a5f6993734e1d9a382587aa21846c780e924b19410b0956
  • bcc-devel-0.25.0-2.el9_2.tuxcare.els1.x86_64.rpm
    sha:f85749cb6e6a6b72ffda7dd600eba885f32b0d8dfe0ed9ec998352aacd35fe10
  • bcc-doc-0.25.0-2.el9_2.tuxcare.els1.noarch.rpm
    sha:4ff732eeec783b1329ec3667959e998d6e2c80ed5e88d95ce909014ad75d6897
  • bcc-tools-0.25.0-2.el9_2.tuxcare.els1.x86_64.rpm
    sha:4b577927ebf5f6d787d6f54dcba8a02c04e17d2829c6ee3ae5ad82fd710ab326
  • libbpf-tools-0.25.0-2.el9_2.tuxcare.els1.x86_64.rpm
    sha:ba295c8fdb7cabd4eaadc34789bc9c7eabcf8d88ee93e8c36f38f67beef2686c
  • python3-bcc-0.25.0-2.el9_2.tuxcare.els1.noarch.rpm
    sha:7b8be2a831f5e20fbefd485957f69134fdc6006a05c8b769e5b1923f5cc82f09
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.