CVE-2023-52446 bpf: Fix a race condition between btf_put() and map_free()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btfput and mapfree When running ./testprogs -j in my local vm with latest kernel, I once hit a kasan error like below: 1887.184724 BUG: KASAN: slab-use-after-free in bpfrbrootfree+0x1f8/0x2b0...

CVE-2023-52446

CVE-2023-52446 affects the Linux kernel BPF subsystem. A race between btf_put() and map_free() can cause a slab-use-after-free in bpf_rb_root_free, as shown by the kasan trace. The impact is described as a use-after-free condition that can lead to a kernel crash or memory corruption. A fix has be...

CVE-2023-52446

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btfput and mapfree When running ./testprogs -j in my local vm with latest kernel, I once hit a kasan error like below: 1887.184724 BUG: KASAN: slab-use-after-free in bpfrbrootfree+0x1f8/0x2b0...

CVE-2023-52446

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btfput and mapfree When running ./testprogs -j in my local vm with latest kernel, I once hit a kasan error like below: 1887.184724 BUG: KASAN: slab-use-after-free in bpfrbrootfree+0x1f8/0x2b0...

PT-2022-28710

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.24 Description A potential security issue has been identified in the Linux Kernel, related to a KASAN error in the LAG NETDEV UNREGISTER handler. The actual impact and attack plausibility have not yet been...

PT-2025-8156

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the btf decl tag bug Description A bug in the Linux kernel's btf decl tag functionality has been identified, which can cause a general protection fault due to a null pointer...

PT-2024-11345

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a global-out-of-bounds bug in the tmc update etf buffer function. This bug occurs because the barrier pkt array is accessed past its size, resulting in a KASAN...