Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-47728

16
FAUCET Score

CVE-2024-47728 is a vulnerability in the Linux kernel's BPF subsystem that could lead to information leakage. Specifically, it involves the failure to zero out certain BPF argument values on error paths, potentially exposing kernel memory. This vulnerability is rated Medium severity (CVSS 5.5) with a local attack vector, low attack complexity, and a potential impact of high availability loss, though confidentiality and integrity are not directly affected. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.2, < 6.1.113CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.54CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.10.13CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.11, < 6.11.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.24%
Probability of exploitation in next 30 days
EPSS Percentile
14.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0024 is in the 63rd percentile among its peer group of 15,940 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (12)

codesyspatch availablevia llm_extracted
View patch
esphomepatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.51.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: 17610-17084Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.56.1-5 on Azure Linux 3.0Fixed in: 6.6.56.1-5
microsoftpatch availablevia msrc
Product: 17603-17084Fixed in: 6.6.56.1-5
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel

Vendor Advisories (5)

codesysllm-codesys-fe85e88fbae25bb9CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
esphomellm-esphome-ed450ce9fd6a7380CRITICAL

HP ThinPro 8.1 SP7 Security Updates

Jun 3, 2025
microsoft2024-Nov/CVE-2024-47728

CVE-2024-47728

Nov 12, 2024
redhatCVE-2024-47728Low

kernel: bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error

Oct 21, 2024
microsoft2024-Oct/CVE-2024-47728Moderate

bpf: Zero former ARG_PTR_TO_{LONGINT} args in case of error

Oct 8, 2024

References

git.kernel.org / stable/c/4b3786a6c5397dc220b1483d8e2f4867743e966f
Patch
git.kernel.org / stable/c/594a9f5a8d2de2573a856e506f77ba7dd2cefc6a
Patch
git.kernel.org / stable/c/599d15b6d03356a97bff7a76155c5604c42a2962
Patch
git.kernel.org / stable/c/8397bf78988f3ae9dbebb0200189a62a57264980
Patch
git.kernel.org / stable/c/a634fa8e480ac2423f86311a602f6295df2c8ed0
Patch
lists.debian.org / debian-lts-announce/2025/01/msg00001.html