{"id":"CVE-2024-2314","aliases":["ALSA-2024:8831","ALSA-2024:9187","AZL-38914","BELL-CVE-2024-2314","CLSA-2026-1789740903","DEBIAN-CVE-2024-2314","EUVD-2024-27269","GHSA-883r-qq2g-w5xj","OESA-2024-2502","RHSA-2024:8831","RHSA-2024:9187","RLSA-2024:8831"],"status":"published","title":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory....","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","severity":{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00218,"percentile":0.12431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-03-10T22:54:31Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"bcc-devel","fixed_in":["0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"bcc-doc","fixed_in":["0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bcc","fixed_in":["0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bcc-devel","fixed_in":["0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bcc-doc","fixed_in":["0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"bcc-tools","fixed_in":["0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libbpf-tools","fixed_in":["0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-bcc","fixed_in":["0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"bcc","fixed_in":["0.29.1-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"bcc","fixed_in":["0.30.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc","fixed_in":["0.25.0-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc-devel","fixed_in":["0.25.0-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc-doc","fixed_in":["0.25.0-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc-tools","fixed_in":["0.25.0-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libbpf-tools","fixed_in":["0.25.0-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-bcc","fixed_in":["0.25.0-2.el9_2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bpfcc","fixed_in":["0.31.0+ds-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bpfcc","fixed_in":["0.31.0+ds-2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"bcc","fixed_in":["0.29.1-3.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-debuginfo","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-debugsource","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-tools","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-tools-debuginfo","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-bcc","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-debuginfo","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-debugsource","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-devel","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-doc","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-tools-debuginfo","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-debuginfo","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-debugsource","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-tools","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-tools-debuginfo","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libbpf-tools","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libbpf-tools-debuginfo","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bcc","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-debuginfo","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-debugsource","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-devel","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-doc","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-tools-debuginfo","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libbpf-tools-debuginfo","fixed_in":["0:0.30.0-6.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"bcc","fixed_in":["0:0.25.0-9.el8_10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"bcc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bcc-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bcc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bcc-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bcc-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libbpf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.1-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.25.0-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.25.0-r3"},{"fixed":"0.30.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bcc-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libbpf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.0-2.el9_2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bpfcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.26.0+ds-1","0.26.0+ds-1+riscv64","0.26.0+ds-2~experimental1","0.26.0+ds-2~experimental2","0.28.0+ds-1","0.29.1+ds-1","0.29.1+ds-1.1","0.29.1+ds-1.1+loong64","0.29.1+ds-1.2","0.30.0+ds-1","0.31.0+ds-1","0.31.0+ds-2","0.31.0+ds-3","0.31.0+ds-4","0.31.0+ds-4~exp1","0.31.0+ds-4~exp2","0.31.0+ds-5","0.31.0+ds-6","0.31.0+ds-7","0.35.0+ds-1","0.35.0+ds-1.1","0.35.0+ds-2~exp1","0.37.0+ds-1","0.37.0+ds-2","0.37.0+ds-3","0.37.0+ds-4","0.37.0+ds-5","0.37.0+ds-6","0.37.0+ds-7","0.37.0+ds-8","0.37.0+ds-9"]},{"source":"osv","ecosystem":"Debian:13","package":"bpfcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.0+ds-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bpfcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31.0+ds-2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.1-3.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bcc-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bcc-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bcc-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libbpf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libbpf-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bcc-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libbpf-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.30.0-6.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bcc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.0-9.el8_10"}]}]}],"products":[{"vendor":"iovisor","product":"bpf compiler collection"},{"vendor":"iovisor","product":"bpf_compiler_collection"}],"references":[{"url":"https://github.com/iovisor/bcc/commit/008ea09e891194c072f2a9305a3c872a241dc342","tags":["patch","x_transferred","Patch","fix"]},{"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2314","tags":["issue-tracking","x_transferred","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2314","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-883r-qq2g-w5xj"},{"url":"https://access.redhat.com/errata/RHSA-2024:8831","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-2314","tags":["report"]},{"url":"https://bugzilla.redhat.com/2269019","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-8831.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9187","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9187.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-2314","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1789740903.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2314.json","tags":["advisory"]},{"url":"https://github.com/iovisor/bcc","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-2314","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2502","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269019","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8831.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-2314","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-28684","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-29031","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9187.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:8831","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-2314","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","status":"published","published":"2024-03-10T22:54:31.563Z","modified":"2024-10-30T18:04:20.999Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:34:10.258163Z"}],"euvd":[{"id":"EUVD-2024-27269","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","status":"published","published":"2024-03-10T22:54:31Z","modified":"2024-10-30T18:04:20Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-03T00:05:13.91882Z"}],"ghsa":[{"id":"GHSA-883r-qq2g-w5xj","title":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory....","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","status":"published","published":"2024-03-11T00:30:45Z","modified":"2024-03-11T00:30:45Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T14:55:39.473736Z"}],"nvd":[{"id":"CVE-2024-2314","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","status":"published","published":"2024-03-10T23:15:53.967Z","modified":"2026-06-17T07:24:17.897Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:09:39.488031Z"}],"osv":[{"id":"BELL-CVE-2024-2314","status":"published","published":"2024-03-11T05:57:40.689544Z","modified":"2026-01-26T09:42:51.069115Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2024-2314","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","status":"published","published":"2024-03-10T22:54:31.563Z","modified":"2026-10-28T10:40:11.109796058Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:38.577405Z"},{"id":"DEBIAN-CVE-2024-2314","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","status":"published","published":"2024-03-10T23:15:53.967Z","modified":"2026-11-02T12:00:46.451003034Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2024-2502","title":"bcc security update","description":"BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known as eBPF, a new feature that was first added to Linux 3.15. BCC makes BPF programs easier to write, with kernel instrumentation in C (and includes a C wrapper around LLVM), and front-ends in Python and lua. It is suited for many tasks, including performance analysis and network traffic control.\r\n\r\nSecurity Fix(es):\r\n\r\nIf kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.(CVE-2024-2314)","status":"published","published":"2024-12-06T11:07:59Z","modified":"2026-08-18T01:18:42.182142778Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2024:8831","title":"Red Hat Security Advisory: bcc security update","status":"published","published":"2024-11-12T17:08:06Z","modified":"2026-06-26T12:22:23.673972718Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9187","title":"Red Hat Security Advisory: bcc security update","status":"published","published":"2024-11-12T18:02:01Z","modified":"2026-06-26T12:21:21.002062043Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"ALSA-2024:8831","title":"Low: bcc security update","description":"BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.  \n\nSecurity Fix(es):  \n\n  * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-05T00:00:00Z","modified":"2026-10-29T11:02:28.063669215Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2024:9187","title":"Low: bcc security update","description":"BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.  \n\nSecurity Fix(es):  \n\n  * bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:21.005911425Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-38914","title":"CVE-2024-2314 affecting package bcc for versions less than 0.29.1-3","description":"If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc to load compromised linux headers. Linux distributions which provide kernel headers by default are not affected by default.","status":"published","published":"2024-03-10T23:15:53Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"CLSA-2026-1789740903","title":"bcc: Fix of CVE-2024-2314","description":"- CVE-2024-2314: missing ownership check on the extracted kernel-header\n  cache in get_proc_kheaders() lets a local user seed\n  /tmp/kheaders-\u003crelease\u003e and inject headers into a privileged bcc compile","status":"published","published":"2026-09-18T14:15:15Z","modified":"2026-10-26T09:30:47.205671373Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"RLSA-2024:8831","title":"Low: bcc security update","description":"BPF Compiler Collection (BCC) is a toolkit for easier creation of efficient kernel tracing and manipulation programs. BCC uses the extended Berkeley Packet Filter (eBPF) tool.\n\nSecurity Fix(es):\n\n* bcc: unprivileged users can force loading of compromised linux headers (CVE-2024-2314)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-11-08T15:56:47.559546Z","modified":"2026-02-04T11:00:06.305773Z","updated_at":"2026-11-02T15:53:24.923365Z"}]}}