PT-2021-27172

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to the netdevsim module, where memory for new map's value is not properly zero-initialized in the nsim bpf map alloc function. This could potentially lead to security...

PT-2021-27147

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.168 Description The issue is related to the netdevsim module, where memory for new map's value is not properly zero-initialized in the function nsim bpf map alloc. This could potentially lead to security...

PT-2021-27220

Name of the Vulnerable Software and Affected Versions netdevsim versions prior to v5.15.11 Description The issue is related to the netdevsim component, where memory for new map's value is not properly zero-initialized in the nsim bpf map alloc function. This could potentially lead to security...

PT-2021-27122

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.222 Description The issue is related to the netdevsim module in the Linux Kernel, where memory for new map's value is not properly zero-initialized in the function nsim bpf map alloc. This could potentially...

Unbreakable Enterprise kernel security update

5.4.17-2136.302.6.1 - rds/ib: Use both iova and key in freemr socket call aru kolappan Orabug:33667276 5.4.17-2136.302.6 - Revert fs: align IOCB flags with RWF flags Prasad Singamsetty Orabug: 33627551 5.4.17-2136.302.5 - Revert drm: Initialize struct drmcrtcstate.novblank from device settings...

GSD-2021-1002474 ice: avoid bpf_prog refcount underflow

ice: avoid bpfprog refcount underflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.83 by commit e65a8707b4cd756d26d246bb2b9fab06eebafac...

PT-2021-26942

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.83 Description The issue is related to a potential refcount underflow in bpf prog. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-27003

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.6 Description The issue concerns a potential security vulnerability related to BPF prog refcount underflow. The actual impact and attack plausibility have not yet been proven. It was introduced in version...

PT-2021-6870

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was found in the Linux kernel's BPF subsystem due to unrestricted eBPF usage by the BPF BTF LOAD, leading to a possible out-of-bounds memory write. This issue allows a local user ...

selinux-policy bug fix and enhancement update

The selinux-policy packages contain the rules that govern how confined processes run on the system. Bug Fixes and Enhancements: RHEL 8.4 Backport container-selinux policy to allow spct domains to set bpf rules on any domain BZ2015846 AVC prevents ping -I from running in UBI 8 container BZ2027691...

PT-2021-8240

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel address leakage in the atomic cmpxchg's r0 aux reg of the BPF component. The implementation of BPF CMPXCHG has parameters including old-val and new-val,...

PT-2021-8241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a kernel address leakage in the Linux kernel's bpf component, specifically in the atomic fetch functionality. This leakage can allow unprivileged users to leak...

libbpf:bpf-object-fuzzer: Crash in bpf_object__close

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=4788041315647488 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffff02017c...

CVE-2018-25020

A buffer overflow flaw in the Linux kernel BPF subsystem was found in the way users run BPF with long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions. A local user could use this flaw to crash the system or escalate their...

SUSE-SU-2021:3992-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 12 SP5 Real Time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_putl32

Detailed Report: https://oss-fuzz.com/testcase?key=6425304699109376 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60600000005b Crash State: bfdputl32...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__init_prog

Detailed Report: https://oss-fuzz.com/testcase?key=5430806022062080 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62c0000c01f8 Crash State: bpfobjectinitprog bpfobjectaddprogra...

SUSE-SU-2021:3979-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via...

SUSE-SU-2021:3978-1 Security update for the Linux RT Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via...

SUSE-SU-2021:3972-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past jscSLE-22573 You can reenable via...