Important: kernel-livepatch-5.10.147-133.644

Issue Overview: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6renewoptions of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a...

GSD-2023-1001453 bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data

bpf, sockmap: Fix repeated calls to sockput when msg has moredata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

GSD-2023-1001448 bpf, sockmap: fix race in sock_map_free()

bpf, sockmap: fix race in sockmapfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

Memory Leak

linux is vulnerable to memory leaks. This issue affects the function nilfsattachlogwriter of the file fs/nilfs2/segment.c of the component BPF, which allows remote attackers to cause memory leaks...

GSD-2023-1001148 bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data

bpf, sockmap: Fix repeated calls to sockput when msg has moredata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1001143 bpf, sockmap: fix race in sock_map_free()

bpf, sockmap: fix race in sockmapfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit a443c55d96dede82a724df6e70a318ad15c199e...

GSD-2023-1001016 bpf: make sure skb->len != 0 when redirecting to a tunneling device

bpf: make sure skb-len != 0 when redirecting to a tunneling device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000801 selftests/bpf: Fix memory leak caused by not destroying skeleton

selftests/bpf: Fix memory leak caused by not destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000800 selftest/bpf: Fix memory leak in kprobe_multi_test

selftest/bpf: Fix memory leak in kprobemultitest This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000785 bpf: Fix slot type check in check_stack_write_var_off

bpf: Fix slot type check in checkstackwritevaroff This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000775 selftests/bpf: Fix xdp_synproxy compilation failure in 32-bit arch

selftests/bpf: Fix xdpsynproxy compilation failure in 32-bit arch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000769 selftests/bpf: fix memory leak of lsm_cgroup

selftests/bpf: fix memory leak of lsmcgroup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000745 bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data

bpf, sockmap: Fix repeated calls to sockput when msg has moredata This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000739 bpf, sockmap: fix race in sock_map_free()

bpf, sockmap: fix race in sockmapfree This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit e8b2b392a646bf5cb9413c1cc7a39d99c1b65a62...

GSD-2023-1000622 bpf: prevent leak of lsm program after failed attach

bpf: prevent leak of lsm program after failed attach This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000538 selftests/bpf: Fix conflicts with built-in functions in bpf_iter_ksym

selftests/bpf: Fix conflicts with built-in functions in bpfiterksym This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000064 powerpc/bpf/32: Fix Oops on tail call tests

powerpc/bpf/32: Fix Oops on tail call tests This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

PT-2023-34093 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to the bpf component in the Linux Kernel, specifically when redirecting to a tunneling device. It ensures that skb-len is not equal to 0. The actual impact and attack...

CVE-2022-3543

A flaw was found in unixsockdestructor/unixreleasesock in net/unix/afunix.c in the BPF component in the Linux Kernel. This issue may lead to a memory leak problem. Mitigation Mitigation for this issue is either not available or the currently available options dont meet the Red Hat Product Securit...

systemd security and bug fix update

239-68.0.2.1 - Backport upstream pstore dmesg fix Orabug: 34850699 - Standardize ioctl BTRFSIOCQGROUPCREATE check and return -ENOTCONN, if quota is not enabled Orabug: 34694253 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev...