{"id":"CVE-2024-2313","details":"If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","modified":"2026-08-18T17:55:36.610406Z","published":"2024-03-10T22:51:51.372Z","related":["ALSA-2024:8830","ALSA-2024:9188","openSUSE-SU-2024:13986-1"],"database_specific":{"cna_assigner":"canonical","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2313.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2313.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2313"},{"type":"REPORT","url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313"},{"type":"FIX","url":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"},{"type":"PACKAGE","url":"https://github.com/bpftrace/bpftrace"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bpftrace/bpftrace","events":[{"introduced":"0"},{"fixed":"b0f7f14abfa83ec08d68e0558391f7529d9d84a5"},{"fixed":"4be4b7191acb8218240e6b7178c30fa8c9b59998"}],"database_specific":{"cpe":"cpe:2.3:a:bpftrace:bpftrace:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.20.2"}],"source":["CPE_FIELD","REFERENCES"]}}],"versions":["v0.20.1","v0.20.0","v0.19.0","v0.18.0","v0.17.0","v0.16.0","v0.15.0","v0.14.0","v0.13.0","v0.12.0","v0.11.0","v0.10.0","v0.9.4","v0.9.2","v0.9.1","v0.9","v0.8"],"database_specific":{"vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998","target":{"file":"src/utils.h"},"deprecated":false,"digest":{"line_hashes":["327864888594507521431347385666633549583","123572721077134179399466502772289195350","52036561074356888448869913097212083853","317722560203614375779409392082292969539"],"threshold":0.9},"id":"CVE-2024-2313-08407fea"},{"target":{"file":"src/utils.cpp","function":"unpack_kheaders_tar_xz"},"deprecated":false,"digest":{"length":1163,"function_hash":"233568578433815806762396599749207792797"},"id":"CVE-2024-2313-285dd66f","signature_type":"Function","signature_version":"v1","source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"},{"source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998","target":{"file":"tests/utils.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["67095913419947930890621096251067623123","151559536440870018989664538521203853114","108587633537507210242609878158511307392"]},"id":"CVE-2024-2313-4968d760","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998","target":{"file":"src/utils.cpp"},"deprecated":false,"digest":{"line_hashes":["209874247025352342332852865408042810072","298474004178131285599867067361581727061","219108163671689240524988520164944864975","72684606142526721658514406393481846705","35231260135326994823184017233146956878","59279459125384092176446519857562695860","309101051014571176821087366080560426052","49221727859306647805062350553137868226","220664888342198764940220326925173838507","40189470356144410531771659300499901762","150893955924231537751755550706728730190","203535591736040787865921227579096605724","177069320596252459210126342634744588008","233005105519457840472290335911182629729","251228999392910743798344697450285438652","30133262550385182328722510428899091875","205001273506854495361922645576476737204","15764449439038189634831157869924398434","128229921313425805590939627954174530380","31025591008693528063430758853325870621","102453935618519354345110838792444012627"],"threshold":0.9},"id":"CVE-2024-2313-dfc215d8","signature_type":"Line","signature_version":"v1"}],"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-2313.json","vanir_signatures_modified":"2026-08-18T17:55:36Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"}]}