Read the docs
TI-2024-02151 Aliases CVE-2024-2314GHSA-883r-qq2g-w5xj

If kernel headers need to be extracted, bcc will attempt to load them from a temporary…

Priority LOW 13Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Partial Red Hat: 4 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00218 12th percentileScored 2026-11-07
Fix Partial BPF Compiler Collection (IOVisor): 008ea09e891194c072f2a9305a3c872a241dc342Red Hat: 2 advisoriesRed Hat: 4 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
IOVisorBPF Compiler Collectionbefore 008ea09e891194c072f2a9305a3c872a241dc342008ea09e891194c072f2a9305a3c872a241dc342Patch availableCNA
  • BPF Compiler Collection VendorIOVisor Affected before 008ea09e891194c072f2a9305a3c872a241dc342 Fixed in 008ea09e891194c072f2a9305a3c872a241dc342 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:iovisor:bpf_compiler_collection:*:*:*:*:*:*:*:*before 0.30.0VulnerableIOVisor
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
  • cpe:2.3:a:iovisor:bpf_compiler_collection:*:*:*:*:*:*:*:* Versions before 0.30.0 Vulnerable ·IOVisor
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux

Remediation

  • Fix · CNA BPF Compiler Collection (IOVisor) Fixed in 008ea09e891194c072f2a9305a3c872a241dc342

Red Hat 2 advisories

  • RHSA-2024:9187 Released 2024-11-12 · Red Hat rating Low
    bcc security update
    • Red Hat CodeReady Linux Builder (v. 9) bcc-devel-0.30.0-6.el9, bcc-doc-0.30.0-6.el9
    • Red Hat Enterprise Linux AppStream (v. 9) bcc-0.30.0-6.el9, bcc-tools-0.30.0-6.el9, libbpf-tools-0.30.0-6.el9 +1
  • RHSA-2024:8831 Released 2024-11-05 · Red Hat rating Low
    bcc security update
    • Red Hat Enterprise Linux AppStream (v. 8) bcc-0.25.0-9.el8_10, bcc-tools-0.25.0-9.el8_10, python3-bcc-0.25.0-9.el8_10
    • Red Hat Enterprise Linux CRB (v. 8) bcc-devel-0.25.0-9.el8_10, bcc-doc-0.25.0-9.el8_10

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat CodeReady Linux Builder (v. 9)Fixed RHSA-2024:9187
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:8831
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:9187
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2024:8831

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-2314
  2. 2026-10-03 Alias added: GHSA-883r-qq2g-w5xj

References

Patch 1

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences