CVE-2024-41003

CVE-2024-41003 is a vulnerability in the Linux kernel's BPF verifier, specifically affecting the reg_set_min_max function. It involves a register invariant violation that occurs when the verifier incorrectly handles "fake" registers during branch analysis, leading to a corruption of the fake_reg state. This flaw impacts the Linux kernel. The vulnerability is rated as HIGH severity with a CVSS score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating that a local attacker with low privileges can exploit it without user interaction. Successful exploitation could lead to high impacts on confidentiality, integrity, and availability, likely due to potential privilege escalation or denial of service. The underlying issue is categorized as CWE-787 (Out-of-bounds Write). Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has not been added to CISA's Known Exploited Vulnerabilities (KEV) catalog, and there is minimal community discussion or media coverage surrounding it.