Description
If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IOVisor | BPF Compiler Collection | < 008ea09e891194c072f2a9305a3c872a241dc342 | 008ea09e891194c072f2a9305a3c872a241dc342 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | bpfcc | 0.31.0+ds-2 | — |
| Debian 13 | bpfcc | 0.31.0+ds-2 | — |
| Debian 12 | bpfcc | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | bcc +5 | 0.30.0-6.el9 | RHSA-2024:9187 |
| RHEL 8 | bcc +4 | 0.25.0-9.el8_10 | RHSA-2024:8831 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | bcc +5 | 0.30.0-6.el9 | ALSA-2024:9187 |
| AlmaLinux 8 | bcc-doc +1 | 0.25.0-9.el8_10 | ALSA-2024:8831 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | bcc | 0.25.0-9.el8_10 | RLSA-2024:8831 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | bcc +5 | 0.26.0-1.amzn2023.0.2 | ALAS2023-2024-626 |
| Amazon Linux 2 | bcc +5 | 0.24.0-3.amzn2.0.5 | ALAS2-2024-2551 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | bcc | 0.29.1-3 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | bcc +5 | 0.30.0-6.el9 | ELSA-2024-9187 |
| Oracle Linux 8 | bcc +4 | 0.25.0-9.el8_10 | ELSA-2024-8831 |
Advisories 10
- ALSA-2024:9187 Low: bcc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:8831 Low: bcc security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:8831 Red Hat Security Advisory: bcc security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2024:9187 Red Hat Security Advisory: bcc security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RLSA-2024:8831 Low: bcc security update Rocky Linux Security Advisories · Feb 4, 2026
- ELSA-2024-9187 Low: bcc security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 14, 2024
- WID-SEC-2024-3333 Red Hat Enterprise Linux: Schwachstellen ermöglichen Manipulation von Dateien BSI CERT-Bund (WID) · Nov 11, 2024
- ELSA-2024-8831 Low: bcc security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 5, 2024
- ALAS2-2024-2551 Low: bcc security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 29, 2024
- ALAS2023-2024-626 Low: bcc security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · May 28, 2024