7320 matches found
The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the bpf component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2023-52928: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Skip invalid kfunc call in backtrackinsn The verifier skips invalid kfunc call in checkkfunccall, which would be captured in fixupkfunccall if such insn is not eliminated by dead code elimination. However, this can lead to t...
The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the bpf component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: allow exp not to be removed in nfctfindexpectation CVE-2023-52927 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key CVE-2024-53179 In the...
The vulnerability of the bpf_object_load_prog() function in the tools/lib/bpf/libbpf.c file of the Linux operating system’s kernel allows a hacker to induce a service failure.
The vulnerability of the bpfobjectloadprog function in the tools/lib/bpf/libbpf.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the bpf_int_jit_compile() function in the arch/arm/net/bpf_jit_32.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the bpfintjitcompile function in the arch/arm/net/bpfjit32.c module of the Linux operating system’s kernel is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the PROG_NAME() function in the kernel/bpf/core.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the PROGNAME function in the kernel/bpf/core.c module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...
CLSA-2025-1742469561 kernel: Fix of 19 CVEs
net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...
The vulnerability of the bpf inode_storage_free() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the bpf inodestoragefree function in the Linux operating system is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the bpf_dummy_unreg() function in the net/bpf/bpf_dummy_struct_ops.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the bpfdummyunreg function in the net/bpf/bpfdummystructops.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the adjust_jmp_off() function in the kernel/bpf/verifier.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the adjustjmpoff function in the kernel/bpf/verifier.c module of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2025-1299)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : initramfs: avoid filename buffer overrunCVE-2024-53142 bpf, sockmap: Several fixes to bpfmsgpopdataCVE-2024-56720 scsi: sg: Fix slab-use-after-fre...
The vulnerability of the bpf_ctx_narrow_access_offset() function in the include/linux/filter.h module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the bpfctxnarrowaccessoffset function in the include/linux/filter.h module of the Linux kernel is related to the copying of a buffer without checking its size a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a system failure...
RockyLinux 9 : oci-seccomp-bpf-hook (RLSA-2024:9277)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:9277 advisory. golang: net: malformed DNS message can cause infinite loop CVE-2024-24788 Tenable has extracted the preceding description block directly from the RockyLinux...
The vulnerability of the adjust_ptr_min_max_vals() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the adjustptrminmaxvals function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux operating systems, is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...
oci-seccomp-bpf-hook security update
An update is available for oci-seccomp-bpf-hook. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OCI Hook to generate seccomp json files based on EBF syscalls us...
bcc bug fix update
An update is available for bcc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list BPF Compiler Collection BCC is a toolkit for easier creation of efficient kernel...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. CVE-2022-49080: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace bsc1238033...
vsock/bpf: return early if transport is not assigned
...
USN-7344-2: Linux kernel vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...