{"id":"DEBIAN-CVE-2024-26591","details":"In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix re-attachment branch in bpf_tracing_prog_attach  The following case can cause a crash due to missing attach_btf:  1) load rawtp program 2) load fentry program with rawtp as target_fd 3) create tracing link for fentry program with target_fd = 0 4) repeat 3  In the end we have:  - prog-\u003eaux-\u003edst_trampoline == NULL - tgt_prog == NULL (because we did not provide target_fd to link_create) - prog-\u003eaux-\u003eattach_btf == NULL (the program was loaded with attach_prog_fd=X) - the program was loaded for tgt_prog but we have no way to find out which one      BUG: kernel NULL pointer dereference, address: 0000000000000058     Call Trace:      \u003cTASK\u003e      ? __die+0x20/0x70      ? page_fault_oops+0x15b/0x430      ? fixup_exception+0x22/0x330      ? exc_page_fault+0x6f/0x170      ? asm_exc_page_fault+0x22/0x30      ? bpf_tracing_prog_attach+0x279/0x560      ? btf_obj_id+0x5/0x10      bpf_tracing_prog_attach+0x439/0x560      __sys_bpf+0x1cf4/0x2de0      __x64_sys_bpf+0x1c/0x30      do_syscall_64+0x41/0xf0      entry_SYSCALL_64_after_hwframe+0x6e/0x76  Return -EINVAL in this situation.","modified":"2026-09-15T09:02:55.809511348Z","published":"2024-02-22T17:15:09.157Z","upstream":["CVE-2024-26591"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-26591"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.76-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26591.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.15-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26591.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.15-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26591.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}