Design/Logic Flaw

2022-09-2311:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpf_sys_bpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAP_BPF can arbitrarily read memory from anywhere on the system. We recommend upgrading past commit 86f44fcec22c

CPENameOperatorVersion
linux_kerneleq< 2022810

CPE	Name	Operator	Version
	linux_kernel	eq	< 2022810

References

git.kernel.org/bpf/bpf/c/86f44fcec22c

lore.kernel.org/bpf/[email protected]/T/