UVI-2021-1001158 bpf: Fix tail_call_reachable rejection for interpreter when jit failed

bpf: Fix tailcallreachable rejection for interpreter when jit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

GSD-2021-1001158 bpf: Fix tail_call_reachable rejection for interpreter when jit failed

bpf: Fix tailcallreachable rejection for interpreter when jit failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.13.6 by commit...

PT-2021-29624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.6 Description The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.9 and fixed in Linux Kerne...

PT-2021-29712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description A potential memory leak issue exists in the Linux Kernel, specifically in the bpf and sockmap components. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-29718

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.52 Description The issue is related to the bpf and involves incorrect tracking of subprog poke descriptors, leading to a potential use-after-free. The actual impact and attack plausibility have not yet...

PT-2021-29619

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.13.4 Description The issue is related to the bpf and involves incorrect tracking of subprog poke descriptors, leading to a potential use-after-free scenario. The actual impact and attack plausibility have...

PT-2021-29623

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.13.5 Description The issue is related to the bpf Berkeley Packet Filter in the Linux Kernel, specifically with the tail call reachable rejection for the interpreter when the JIT Just-In-Time compilation...

PT-2021-29625

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.13.5 Description A potential memory leak issue has been identified in the Linux Kernel, specifically in the bpf and sockmap components. The actual impact and attack plausibility of this issue have not yet...

PT-2021-29714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.53 Description The issue is related to the bpf interpreter in the Linux Kernel. It concerns a problem with tail call reachable rejection when the jit failed. The actual impact and potential for attack...

PT-2021-25629

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.6 Description: The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2021-25630

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.13.5 Description: A potential memory leak issue exists in the Linux Kernel due to an unlikely error case in bpf and sockmap. The actual impact and attack plausibility have not yet been proven...

PT-2021-25659

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.13.4 Description: The issue concerns detecting BPF atomic instructions in the powerpc/bpf component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-25628

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.13.5 Description: The issue is related to the bpf Berkeley Packet Filter in the Linux Kernel, specifically with the tail call reachable rejection for the interpreter when the JIT Just-In-Time compiler...

PT-2021-25716

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25624

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.13.4 Description: The issue is related to the bpf tracker's handling of subprog poke descriptors, which could lead to a use-after-free condition. The actual impact and attack plausibility have not yet be...

PT-2021-25719

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.53 Description The issue is related to the bpf Berkeley Packet Filter in the Linux Kernel, specifically with the tail call reachable rejection for the interpreter when the JIT Just-In-Time compilation...

PT-2021-25717

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description A potential memory leak issue exists in the Linux Kernel, specifically in the bpf and sockmap components. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2021-29654

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.13.4 Description The issue concerns detecting BPF atomic instructions in the powerpc/bpf component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-29711

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.54 Description The issue is related to a use-after-free in bpf xdp link release. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-25723

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.52 Description The issue is related to the bpf component, specifically with tracking subprog poke descriptors correctly and fixing a use-after-free problem. The actual impact and attack plausibility ha...