CVE-2021-29155

Questo è il codice Proof of Concept per CVE-2021-29155. Il sistema di tracciamento dell'intervallo per l'aritmetica dei puntatori nel dominio speculativo era insufficiente. Era possibile estrarre dati del kernel tramite un canale laterale. Questo è un proof of concept, puoi leggere fino a 0x5fff...

CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: Un byte nel verificatore BPF per la fuga dal container Ho trovato un bug di soundness nel verificatore BPF di Linux - un + 1 in una chiamata a pushstack che fa saltare al verificatore un'istruzione ALU su un percorso forkato. Per BPFOR, questo significa che il verificatore traccia...

CVE-2020-8835

CVE-2020-8835 root@kitploit: Nel kernel Linux 5.5.0 e successivi, il bpf verifier kernel/bpf/verifier.c non limita correttamente i registri per le operazioni a 32 bit, portando a letture e scritture fuori dai limiti nella memoria del kernel. Questa vulnerabilità colpisce anche la serie stabile...

CVE-2017-16995

CVE-2017-16995 Dokumentation meiner eigenen Bastelei mit der CVE-2017-16995-Schwachstelle und der zugehörigen Analyse Hoffentlich finde ich selbst eine, lol Überblick Diese Schwachstelle ist eine LPE, die durch eine fehlerhafte Verzweigungsprüfung des Verifiers während der virtuellen bpf-Ausführu...

CVE-2017-16995

CVE-2017-16995 CVE-ID: CVE-2017-16995 Veröffentlichungsdatum: 2017-12-27T17:08:17.670 Basis-Score CVSS 3.0/3.1: 7.8 Beschreibung: Die Funktion checkaluop in kernel/bpf/verifier.c im Linux-Kernel bis Version 4.4 ermöglicht es lokalen Benutzern, einen Denial-of-Service Speicherkorruption zu...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098676)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098676 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction jump...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098777 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bpf: Fixed the overloading of the meaning of MEMUNINIT Lonial reported an issue with the BPF verifier, where the checkmemsizereg function contains the following code: c if !tnumisconstreg-varoff / For unprivileged variable...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: synclinked regs must preserve subregdef Range propagation must not affect subregdef marks. Otherwise, the following example is rewritten incorrectly by the verifier when the BPFFTESTRNDHI32 flag is set: 0: call bpfktimegetns...

SUSE CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

AZL-97209 CVE-2026-74720 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74590

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains valid. They do not, however, provide any guarantee that the contents of...

CVE-2026-74720 bpf: Preserve pointer state for commuted arithmetic

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720 bpf: Preserve pointer state for commuted arithmetic

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

CVE-2026-74720 affects the BPF component of the Linux kernel . In adjust_ptr_min_max_vals(), handling of the commuted arithmetic operation scalar += pointer copies only selected fields from the source pointer state to the destination register. Because pointer provenance is tracked across multiple...

EUVD-2026-64407

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

Linux Distros Unpatched Vulnerability : CVE-2026-74590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsverity: Fix bpfgetfsveritydigest dynptr assumptions The BPF verifier and the dynptr abstraction ensure that the memory space referenced by a dynptr remains...

CVE-2026-72401

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. This vulnerability occurs when the bpfcheck function fails to allocate certain resources, leading to a memory leak of insnauxdata. An attacker could potentially exploit this by repeatedly triggering the flaw, which may...

CVE-2026-71878

creationtimestamp| type| source ---|---|--- 2026-08-18 20:09:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtezikaxm22j 2026-08-18 21:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtf4d3ujvs2j...