libbpf bug fix and enhancement update

An update is available for libbpf. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

ALEA-2021:4491 libbpf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__section_to_libbpf_map_type

Detailed Report: https://oss-fuzz.com/testcase?key=4819294802804736 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6140000df8c8 Crash State: bpfobjectsectiontolibbpfmaptype...

libbpf:bpf-object-fuzzer: Heap-use-after-free in bpf_object__init_user_maps

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=4927709692690432 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x612000092684 Cras...

libbpf:bpf-object-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5268028497985536 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerubsanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003bf0020 Crash State: NULL Sanitizer: undefined UBSAN...

libbpf:bpf-object-fuzzer: Global-buffer-overflow in btf_new

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6612626260492288 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address:...

libbpf:bpf-object-fuzzer: Crash in __bpf_object__open

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6218051104669696 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasanlibbpf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6140000542a0 Crash...

UVI-2021-1001694 libbpf: Fix memory leak in strset

libbpf: Fix memory leak in strset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit 9e8e7504e09831c469b67d6dc11d9a72654bdb8c, i...

GSD-2021-1001694 libbpf: Fix memory leak in strset

libbpf: Fix memory leak in strset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.12 by commit 9e8e7504e09831c469b67d6dc11d9a72654bdb8c, i...

PT-2021-30159

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description A memory leak issue was discovered in libbpf's strset. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.13 and fixed in Linux Kernel...

PT-2021-26164

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.12 Description A memory leak issue was discovered in libbpf's strset. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.13 and fixed in Linux Kernel...

PT-2024-11413

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue in the libbpf component of the Linux kernel has been resolved. The fix involves freeing the struct strset itself, rather than just its internal parts. Recommendations...

Fedora: Security Advisory for libbpf (FEDORA-2021-4786624190)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 33 Update: libbpf-0.4.0-1.fc33

A mirror of bpf-next linux tree bpf-next/tools/lib/bpf directory plus its supporting header files. The version of the package reflects the version of ABI...

GSD-2021-1000034 libbpf: Fix potential NULL pointer dereference

libbpf: Fix potential NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.32 by commit...

GSD-2021-1000016 libbpf: Fix potential NULL pointer dereference

libbpf: Fix potential NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

GSD-2021-1000329 libbpf: Fix signed overflow in ringbuf_process_ring

libbpf: Fix signed overflow in ringbufprocessring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

UVI-2021-1000016 libbpf: Fix potential NULL pointer dereference

libbpf: Fix potential NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

UVI-2021-1000329 libbpf: Fix signed overflow in ringbuf_process_ring

libbpf: Fix signed overflow in ringbufprocessring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.38 by commit...

GSD-2021-1000212 libbpf: Fix signed overflow in ringbuf_process_ring

libbpf: Fix signed overflow in ringbufprocessring This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...