CVE-2017-16995

CVE-2017-16995 ID CVE: CVE-2017-16995 Date de publication: 2017-12-27T17:08:17.670 Score de base CVSS 3.0/3.1: 7.8 Description: La fonction checkaluop dans kernel/bpf/verifier.c du noyau Linux jusqu'à la version 4.4 permet aux utilisateurs locaux de provoquer un déni de service corruption mémoire...

CVE-2021-29155

Это код Proof Of Concept для CVE-2021-29155. Система отслеживания диапазона для арифметики указателей в спекулятивной области была недостаточной. Было возможно извлечь данные ядра через побочный канал. Это proof of concept, вы можете читать до 0x5fff байт за пределами допустимого диапазона, начин...

CVE-2017-16995

CVE-2017-16995 Documentation de mes explorations sur la faille CVE-2017-16995 et analyses associées J'espère en trouver une moi-même, lol Aperçu Cette vulnérabilité est une LPE causée par une erreur de jugement de branche du vérifieur lors de l'exécution virtuelle de BPF En principe, il s'agit...

Linux Distros Unpatched Vulnerability : CVE-2026-93125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject rdonly/rdwrbufsize kfunc arguments that exceed u32 max checkkfuncargs detects a kfunc argument named rdonlybufsize or rdwrbufsize and stores...

DEBIAN-CVE-2026-90217

In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEMRCU or PTRUNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path. Compare the pointer type for STACKITER slots...

EUVD-2026-81892

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIGFUNCTIONERRORINJECTION is disabled, a sleepable tracing prog is allowed to attach to 'x64'-alike prefix symbols. It is because the verifier does not verify whether the symb...

CVE-2026-90299 bpf: Fix sleepable check for tracing/lsm prog

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIGFUNCTIONERRORINJECTION is disabled, a sleepable tracing prog is allowed to attach to 'x64'-alike prefix symbols. It is because the verifier does not verify whether the symb...

EUVD-2026-81810

In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEMRCU or PTRUNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path. Compare the pointer type for STACKITER slots...

CVE-2026-90217 bpf: Compare iterator types during state pruning

In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state pruning An iterator stack slot can be MEMRCU or PTRUNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path. Compare the pointer type for STACKITER slots...

CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413 : un octet dans le vérificateur BPF pour une évasion de conteneur J'ai trouvé un bug de sûreté dans le vérificateur BPF de Linux - un + 1 dans un appel à pushstack qui fait que le vérificateur saute une instruction ALU sur un chemin dupliqué. Pour BPFOR, cela signifie que le...

CVE-2020-8835

CVE-2020-8835 root@kitploit: Dans le noyau Linux 5.5.0 et versions ultérieures, le vérificateur BPF kernel/bpf/verifier.c ne restreint pas correctement les bornes des registres pour les opérations 32 bits, ce qui entraîne des lectures et écritures hors limites dans la mémoire du noyau. Cette...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed the overloading of the meaning of MEMUNINIT Lonial reported an issue with the BPF verifier, where the checkmemsizereg function contains the following code: c if !tnumisconstreg-varoff / For unprivileged variable...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: synclinked regs must preserve subregdef Range propagation must not affect subregdef marks. Otherwise, the following example is rewritten incorrectly by the verifier when the BPFFTESTRNDHI32 flag is set: 0: call bpfktimegetns...

The vulnerability of the adjust_reg_min_max_vals() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the adjustregminmaxvals function in the kernel/bpf/verifier.c module of the Linux operating system is related to improper handling of an additional special element. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the map_kptr_match_type() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the mapkptrmatchtype function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a system failure...

The vulnerability of the check_scalar_ids() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkscalarids function in the kernel/bpf/verifier.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the functions check_ld_abs() and visit_insn() in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions checkldabs and visitinsn in the kernel/bpf/verifier.c module of the Linux operating system’s kernel relates to the improper handling of an additional special element. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the check_mem_access() function in the kernel/bpf/verifier.c module, which supports the BPF interpreter of the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the checkmemaccess function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098676 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098777 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range...