{"id":"CVE-2024-2313","details":"If kernel headers need to be extracted, bpftrace will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","modified":"2026-04-12T10:24:58.331612Z","published":"2024-03-10T23:15:53.760Z","related":["ALSA-2024:8830","ALSA-2024:9188","openSUSE-SU-2024:13986-1"],"references":[{"type":"ADVISORY","url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2313"},{"type":"FIX","url":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bpftrace/bpftrace","events":[{"introduced":"0"},{"fixed":"b0f7f14abfa83ec08d68e0558391f7529d9d84a5"},{"fixed":"4be4b7191acb8218240e6b7178c30fa8c9b59998"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"0.20.2"}]}}],"versions":["v0.10.0","v0.11.0","v0.12.0","v0.13.0","v0.14.0","v0.15.0","v0.16.0","v0.17.0","v0.18.0","v0.19.0","v0.20.0","v0.20.1","v0.8","v0.9","v0.9.1","v0.9.2","v0.9.4"],"database_specific":{"vanir_signatures_modified":"2026-04-12T10:24:58Z","vanir_signatures":[{"id":"CVE-2024-2313-08407fea","signature_type":"Line","signature_version":"v1","source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998","target":{"file":"src/utils.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["327864888594507521431347385666633549583","123572721077134179399466502772289195350","52036561074356888448869913097212083853","317722560203614375779409392082292969539"]}},{"deprecated":false,"digest":{"function_hash":"233568578433815806762396599749207792797","length":1163},"id":"CVE-2024-2313-285dd66f","signature_type":"Function","signature_version":"v1","source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998","target":{"file":"src/utils.cpp","function":"unpack_kheaders_tar_xz"}},{"deprecated":false,"digest":{"line_hashes":["67095913419947930890621096251067623123","151559536440870018989664538521203853114","108587633537507210242609878158511307392"],"threshold":0.9},"id":"CVE-2024-2313-4968d760","signature_type":"Line","signature_version":"v1","source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998","target":{"file":"tests/utils.cpp"}},{"deprecated":false,"digest":{"line_hashes":["209874247025352342332852865408042810072","298474004178131285599867067361581727061","219108163671689240524988520164944864975","72684606142526721658514406393481846705","35231260135326994823184017233146956878","59279459125384092176446519857562695860","309101051014571176821087366080560426052","49221727859306647805062350553137868226","220664888342198764940220326925173838507","40189470356144410531771659300499901762","150893955924231537751755550706728730190","203535591736040787865921227579096605724","177069320596252459210126342634744588008","233005105519457840472290335911182629729","251228999392910743798344697450285438652","30133262550385182328722510428899091875","205001273506854495361922645576476737204","15764449439038189634831157869924398434","128229921313425805590939627954174530380","31025591008693528063430758853325870621","102453935618519354345110838792444012627"],"threshold":0.9},"id":"CVE-2024-2313-dfc215d8","signature_type":"Line","signature_version":"v1","source":"https://github.com/bpftrace/bpftrace/commit/4be4b7191acb8218240e6b7178c30fa8c9b59998","target":{"file":"src/utils.cpp"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2313.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L"}]}