1005 matches found
CVE-2023-53634
In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPFTRAMPFCALLORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the...
PT-2025-41041
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0 1 Description The Linux kernel contains a flaw in the bpf, sockmap subsystem related to repeated calls to sock put when a message has more data. Specifically, in the tcp bpf send verdict redirection, the ev...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987311)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987311 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential array overflow in bpftrampolinegetprogs The cnt value in the 'cnt =...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414592)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414592 advisory. The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414612)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414612 advisory. This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986761)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986761 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix wrong reg type conversion in releasereference Some helper functions will allocate memory...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987325)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987325 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL ptregs in bpfgettaskstack taskptregs can return NULL on powerpc...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986712)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986712 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tailcallreachable rejection for interpreter when jit failed During testing of f263a81451...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the BPF springboard not checking the BTI instruction when returning a patched function using the BLR instruction...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414546)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414546 advisory. A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw,...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414594)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414594 advisory. This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986996)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986996 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Track subprog poke descriptors correctly and fix use-after-free Subprograms are calling...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414539)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414539 advisory. A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that functio...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414597)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414597 advisory. In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attac...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414554)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414554 advisory. arch/mips/net/bpfjit.c in the Linux kernel before 5.4.10 can generate undesirable machine code when transforming unprivileged cBPF programs, allowing execution of...
UBUNTU-CVE-2022-50490
In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htablockbucket to userspace In htabmaplookupanddeletebatch if htablockbucket returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but...
CVE-2022-50490 bpf: Propagate error from htab_lock_bucket() to userspace
In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htablockbucket to userspace In htabmaplookupanddeletebatch if htablockbucket returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but...
CVE-2023-53577 bpf, cpumap: Make sure kthread is running before map update returns
In the Linux kernel, the following vulnerability has been resolved: bpf, cpumap: Make sure kthread is running before map update returns The following warning was reported when running stress-mode enabled xdpredirectcpu with some RT threads: ------------ cut here ------------ WARNING: CPU: 4 PID: ...
CVE-2023-53577 bpf, cpumap: Make sure kthread is running before map update returns
In the Linux kernel, the following vulnerability has been resolved: bpf, cpumap: Make sure kthread is running before map update returns The following warning was reported when running stress-mode enabled xdpredirectcpu with some RT threads: ------------ cut here ------------ WARNING: CPU: 4 PID: ...
