CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

Libbpf 缓冲区错误漏洞

Libbpf is BPF is a kernel technology that allows anyone to choose how the kernel runs without extensive kernel development experience and spending a lot of time setting up for kernel development. A buffer error vulnerability exists in Libbpf that stems from the product's bpfobjectopenmem and...

CVE-2021-45941

libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow 8 bytes in bpfobjectopen called from bpfobjectopenmem and bpf-object-fuzzer.c...

PT-2021-24330 · Libbpf +3 · Libbpf +3

Name of the Vulnerable Software and Affected Versions: libbpf versions 0.6.0 through 0.6.1 Description: The issue is a heap-based buffer overflow of 8 bytes in the bpf object open function, which is called from bpf object open mem and bpf-object-fuzzer.c. Recommendations: For libbpf versions 0.6....

PT-2021-24329 · Libbpf +3 · Libbpf +3

Name of the Vulnerable Software and Affected Versions: libbpf versions 0.6.0 through 0.6.1 Description: The issue is a heap-based buffer overflow of 4 bytes in the bpf object open function, which is called from bpf object open mem and bpf-object-fuzzer.c. This overflow can potentially lead to...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2021-2912)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition was discovered in ext4writeinlinedataend in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13...

GSD-2021-1002730 bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg

bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002729 bpf: Fix kernel address leakage in atomic fetch

bpf: Fix kernel address leakage in atomic fetch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002728 bpf: Fix signed bounds propagation after mov32

bpf: Fix signed bounds propagation after mov32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...

GSD-2021-1002690 bpf: Fix signed bounds propagation after mov32

bpf: Fix signed bounds propagation after mov32 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

Unbreakable Enterprise kernel security update

5.4.17-2136.302.6.1 - rds/ib: Use both iova and key in freemr socket call aru kolappan Orabug:33667276 5.4.17-2136.302.6 - Revert fs: align IOCB flags with RWF flags Prasad Singamsetty Orabug: 33627551 5.4.17-2136.302.5 - Revert drm: Initialize struct drmcrtcstate.novblank from device settings...

GSD-2021-1002474 ice: avoid bpf_prog refcount underflow

ice: avoid bpfprog refcount underflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit e65a8707b4cd756d26d246bb2b9fab06eebafac...

selinux-policy bug fix and enhancement update

The selinux-policy packages contain the rules that govern how confined processes run on the system. Bug Fixes and Enhancements: RHEL 8.4 Backport container-selinux policy to allow spct domains to set bpf rules on any domain BZ2015846 AVC prevents ping -I from running in UBI 8 container BZ2027691...

CVE-2018-25020

A buffer overflow flaw in the Linux kernel BPF subsystem was found in the way users run BPF with long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. A local user could use this flaw to crash the system or escalate their...

SUSE-SU-2021:3992-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 12 SP5 Real Time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can...

SUSE-SU-2021:3979-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via...

SUSE-SU-2021:3978-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via...

SUSE-SU-2021:3972-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via...

CVE-2018-25020

The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c...

CVE-2018-25020

The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c...