EUVD-2022-54563

Malicious code in bioql PyPI...

sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers

...

SUSE CVE-2024-53128

In the Linux kernel, the following vulnerability has been resolved: sched/taskstack: fix objectisonstack for KASAN tagged pointers When CONFIGKASANSWTAGS and CONFIGKASANSTACK are enabled, the objectisonstack function may produce incorrect results due to the presence of tags in the obj pointer,...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the objectisonstack function of the KASAN marker pointer in the sched/taskstack module that may produce incorrec...

AZL-42901 CVE-2024-38667 affecting package kernel for versions less than 6.6.35.1-4

In the Linux kernel, the following vulnerability has been resolved: riscv: prevent ptregs corruption for secondary idle threads Top of the kernel thread stack should be reserved for ptregs. However this is not the case for the idle threads of the secondary boot harts. Their stacks overlap with...

SUSE CVE-2022-48770

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL ptregs in bpfgettaskstack taskptregs can return NULL on powerpc for kernel threads. This is then used in bpfgetstack to check for user mode, resulting in a kernel oops. Guard against this by...

DEBIAN-CVE-2022-48770

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL ptregs in bpfgettaskstack taskptregs can return NULL on powerpc for kernel threads. This is then used in bpfgetstack to check for user mode, resulting in a kernel oops. Guard against this by...

UBUNTU-CVE-2022-48770

In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL ptregs in bpfgettaskstack taskptregs can return NULL on powerpc for kernel threads. This is then used in bpfgetstack to check for user mode, resulting in a kernel oops. Guard against this by...

CVE-2021-47553

In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringupcpu To hot unplug a CPU, the idle task on that CPU calls a few layers of C code before finally leaving the kernel. When KASAN is in use, poisoned shadow is left around for each of the...

CVE-2021-47553

In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringupcpu To hot unplug a CPU, the idle task on that CPU calls a few layers of C code before finally leaving the kernel. When KASAN is in use, poisoned shadow is left around for each of the...

CVE-2021-47553 sched/scs: Reset task stack state in bringup_cpu()

In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringupcpu To hot unplug a CPU, the idle task on that CPU calls a few layers of C code before finally leaving the kernel. When KASAN is in use, poisoned shadow is left around for each of the...

CVE-2021-47553

The CVE describes a Linux kernel issue (CVE-2021-47553) in the SCS and KASAN shadow stack handling for the idle task during CPU hotplug (bringup_cpu). When a CPU is offline and brought back online, stale KASAN shadow and stale shadow call stack (SCS) state could lead to bogus warnings or leak por...

CVE-2021-47553 sched/scs: Reset task stack state in bringup_cpu()

In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringupcpu To hot unplug a CPU, the idle task on that CPU calls a few layers of C code before finally leaving the kernel. When KASAN is in use, poisoned shadow is left around for each of the...

CVE-2023-52796 ipvlan: add ipvlan_route_v6_outbound() helper

In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlanroutev6outbound helper Inspired by syzbot reports using a stack of multiple ipvlan devices. Reduce stack size needed in ipvlanprocessv6outbound by moving the flowi6 struct used for the route lookup in an non...

PT-2022-28877

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue concerns accessing NULL pt regs in the bpf get task stack function. It was introduced in version v5.9 and fixed in Linux Kernel version v5.16.5. The actual impact and attack...

PT-2022-28460

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description The issue concerns accessing NULL pt regs in the bpf get task stack function. This is an automated identification of a potential security issue, but the actual impact and attack plausibility...

PT-2022-28519

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description The issue concerns accessing NULL pt regs in the bpf get task stack function. It was introduced in version v5.9 and fixed in version v5.15.19. The actual impact and attack plausibility have n...

GSD-2021-1002547 sched/scs: Reset task stack state in bringup_cpu()

sched/scs: Reset task stack state in bringupcpu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.6 by commit...

PT-2021-26947

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.50 through 5.10.82 Description The issue is related to the reset of task stack state in the bringup cpu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-27015

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.6 Description The issue is related to the reset of task stack state in the bringup cpu function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...