kernel: bpf: Fix out-of-bounds write in trie_get_next_key()

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. A privileged local attacker could exploit an out-of-bounds write vulnerability in the triegetnextkey function. This occurs because the function attempts to write more data than the allocated buffer size, leading to memor...

kernel: bpf: Fix a sdiv overflow issue

A flaw was found in the kernel's Berkeley Packet Filter BPF subsystem. A privileged local user can trigger a signed division or modulo overflow when executing a BPF program on an x8664 system. This overflow can lead to a kernel exception and subsequently cause a system crash, resulting in a Denia...

RHEL 9 : kernel (RHSA-2024:10945)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10945 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: bpf: Add BPFPROGTYPECGROUPSKB attach...

SUSE SLES15 Security Update : kernel (Live Patch 2 for SLE 15 SP6) (SUSE-SU-2024:4209-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4209-1 advisory. This update for the Linux Kernel 6.4.0-1506002314 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory...

SUSE SLES15 Security Update : kernel (Live Patch 3 for SLE 15 SP6) (SUSE-SU-2024:4210-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4210-1 advisory. This update for the Linux Kernel 6.4.0-1506002317 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory...

[SECURITY] Fedora 41 Update: retsnoop-0.10.1-3.fc41

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

[SECURITY] Fedora 40 Update: retsnoop-0.10.1-3.fc40

retsnoop is BPF-based tool that is meant to help debugging kernel issues. It allows to capture call stacks of kernel functions that return errors NULL or -Exxx and emits every such detected call stack, along with the captured results...

PT-2024-10133

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to a use-after-free UAF vulnerability in the Linux kernel's BPF uprobe attachments. Uprobes use bpf prog run array uprobe under tasks-trace-RCU protection, but it is possib...

PT-2024-36974

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A race condition exists between element replacement and close in the Linux kernel's bpf and sockmap handling. This can lead to a situation where an element is unreferenced incorrectly, resultin...

PT-2024-36975

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to an invalid access to prog array in perf event detach bpf prog. A crash occurs when a tracepoint perf event with attr.inherit=1 is created, attached to a process, and a b...

Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002317 fixes several issues. The following security issues were fixed: CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks bsc1229273. CVE-2023-52752: smb: client: fix...

SUSE-SU-2024:4209-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002314 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG bsc1228511. - CVE-2024-35949: btrfs: make sure that...

CVE-2024-53125

In the Linux kernel, the following vulnerability has been resolved: bpf: synclinkedregs must preserve subregdef Range propagation must not affect subregdef marks, otherwise the following example is rewritten by verifier incorrectly when BPFFTESTRNDHI32 flag is set: 0: call bpfktimegetns call...

SUSE CVE-2024-53125

In the Linux kernel, the following vulnerability has been resolved: bpf: synclinkedregs must preserve subregdef Range propagation must not affect subregdef marks, otherwise the following example is rewritten by verifier incorrectly when BPFFTESTRNDHI32 flag is set: 0: call bpfktimegetns call...

CVE-2024-53125

In the Linux kernel, the following vulnerability has been resolved: bpf: synclinkedregs must preserve subregdef Range propagation must not affect subregdef marks, otherwise the following example is rewritten by verifier incorrectly when BPFFTESTRNDHI32 flag is set: 0: call bpfktimegetns call...

CVE-2024-53125

In the Linux kernel, the following vulnerability has been resolved: bpf: synclinkedregs must preserve subregdef Range propagation must not affect subregdef marks, otherwise the following example is rewritten by verifier incorrectly when BPFFTESTRNDHI32 flag is set: 0: call bpfktimegetns call...

CVE-2024-53125

CVE-2024-53125 (Linux kernel BPF): A patch fixes an issue in bpf: sync_linked_regs() where subreg_def could be overwritten during range propagation, causing verifier rewrites when BPF_F_TEST_RND_HI32 is set. The patch ensures subreg_def is preserved, preventing incorrect hi32 handling and potenti...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-53125: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: synclinkedregs must preserve subregdef Range propagation must not affect subregdef marks, otherwise the following example is rewritten by verifier incorrectly when BPFFTESTRNDHI32 flag is set: 0: call bpfktimegetns call...