bpf: fix potential 32-bit overflow when accessing ARRAY map element

...

SUSE CVE-2025-40169

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the checkaluop function validates instructions with ALU operations. The 'offset' field in these instructions is a signed 16-bit integer. The existing check...

EUVD-2025-150391

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40151

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs The current implementation does not support struct argument. This causes a oops when running bpf selftest: $ ./testprogs -a tracingstruct Oops1: CPU -1 Unable t...

CVE-2025-40123

In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel's BPF subsystem. This...

UBUNTU-CVE-2025-40143

In the Linux kernel, the following vulnerability has been resolved: bpf: dont report verifier bug for missing bpfsccvisit on speculative path Syzbot generated a program that triggers a verifierbug call in maybeexitscc. maybeexitscc assumes that, when called for a state with insnidx in some SCC,...

CVE-2025-40169

CVE-2025-40169 concerns the Linux kernel BPF verifier, where the check_alu_op() logic for ALU operations incorrectly allowed negative offsets due to signedness. The vulnerability arises when validating BPF instructions with signed 16-bit off fields; the historical check insn->off > 1 failed...

CVE-2025-40143

CVE-2025-40143 concerns the Linux kernel BPF verifier. Syzbot-generated input could trigger a verifier_bug() in maybe_exit_scc() when processing a state inside an SCC, under speculative execution paths. The root cause was an assumption that an existing bpf_scc_visit instance always accompanies a ...

CVE-2025-40123

CVE-2025-40123 is a Linux kernel vulnerability described in EulerOS advisory as a fix for the BPF tailcall compatibility check. The issue arises in the BPF subsystem where tailcalls could bypass constraints based on an program’s expected_attach_type, potentially enabling a NULL pointer dereferenc...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the LoongArch architecture BPF not supporting struct parameters, which could lead to a kernel crash...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the BPF validator not properly rejecting negative offsets in ALU operations, which could lead to the execution o...

kernel: bpf: put bpf_link's program when link is safe to be deallocated

No description is available for this CVE...

kernel: bpf: Fix deadlock when freeing cgroup storage

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock when freeing cgroup storage The following commit bc235cdb423a "bpf: Prevent deadlock from recursive bpftaskstorageget|delete" first introduced deadlock prevention for fentry/fexit programs attaching on...

[SECURITY] Fedora 43 Update: bpfman-0.5.4-3.fc43

bpfman operates as an eBPF manager, focusing on simplifying the deployment and administration of eBPF programs...

bpf: Prevent bpf program recursion for raw tracepoint probes

...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990378 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989659)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989659 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix requestsock leak in sk lookup helpers A customer reported a requestsocket leak in a Cali...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989183)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989183 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL ptregs in bpfgettaskstack taskptregs can return NULL on powerpc...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989171 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Add oversize check before call kvcalloc Commit 7661809d493b mm: don't allow oversized kvmall...