CVE-2025-40319

The CVE-2025-40319 issue is a race in the Linux kernel’s BPF ring buffer handling. Specifically, a BPF program can queue irq_work via bpf_ringbuf_commit(), and if the ring buffer is freed before the work runs, the irq_work thread may access freed memory. The documented fix is to synchronize pendi...

The vulnerability of the bpf_jit.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the bpfjit.c component in the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability allows an attacker to cause a service failure...

kernel: bpf: Don't use tnum_range on array range checking for poke descriptors

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't use tnumrange on array range checking for poke descriptors Hsin-Wei reported a KASAN splat triggered by their BPF runtime fuzzer which is based on a customized syzkaller: BUG: KASAN: slab-out-of-bounds in...

The vulnerabilities of the bpf and ktls components of the Linux operating system allow attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the bpf and ktls components in the Linux operating system’s kernel is related to the use of uninitialized resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of the protected information...

The vulnerability of the bpf_prog_test_run_xdp() function in the kernel/bpf/core.c file, which is part of the BPF interpreter support for Linux kernel, allows a hacker to trigger a service failure.

The vulnerability of the bpfprogtestrunxdp function in the kernel/bpf/core.c file, which is part of the BPF interpreter support for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2025-52891

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel’s BPF Berkeley Packet Filter implementation related to exclusive maps. Specifically, when excl prog hash is zero and excl prog hash size is...

EBPF-PATROL: Protective Agent for Threat Recognition and Overreach Limitation Using EBPF in Containerized and Virtualized Environments

With the increasing use and adoption of cloud and cloud-native computing, the underlying technologies i.e., containerization and virtualization have become foundational. However, strict isolation and maintaining runtime security in these environments has become increasingly challenging. Existing...

SUSE-SU-2025:4149-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc124985...

bpf: fix potential 32-bit overflow when accessing ARRAY map element

...

PT-2025-53008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an invalid memory access can occur following fault injection in the update effective progs function. This issue arises when fault injection causes...

SUSE CVE-2025-40169

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the checkaluop function validates instructions with ALU operations. The 'offset' field in these instructions is a signed 16-bit integer. The existing check...

The vulnerability of the bpf_exec_tx_verdict() function in the Linux operating system’s bpf component allows a hacker to induce a service failure.

The vulnerability of the bpfexectxverdict function in the Linux operating system’s bpf component is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2025-150391

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40151

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: No support of struct argument in trampoline programs The current implementation does not support struct argument. This causes a oops when running bpf selftest: $ ./testprogs -a tracingstruct Oops1: CPU -1 Unable t...

CVE-2025-40123

In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel's BPF subsystem. This...

UBUNTU-CVE-2025-40143

In the Linux kernel, the following vulnerability has been resolved: bpf: dont report verifier bug for missing bpfsccvisit on speculative path Syzbot generated a program that triggers a verifierbug call in maybeexitscc. maybeexitscc assumes that, when called for a state with insnidx in some SCC,...

CVE-2025-40169

CVE-2025-40169 concerns the Linux kernel BPF verifier, where the check_alu_op() logic for ALU operations incorrectly allowed negative offsets due to signedness. The vulnerability arises when validating BPF instructions with signed 16-bit off fields; the historical check insn->off > 1 failed...

CVE-2025-40143

CVE-2025-40143 concerns the Linux kernel BPF verifier. Syzbot-generated input could trigger a verifier_bug() in maybe_exit_scc() when processing a state inside an SCC, under speculative execution paths. The root cause was an assumption that an existing bpf_scc_visit instance always accompanies a ...

CVE-2025-40123

CVE-2025-40123 is a Linux kernel vulnerability described in EulerOS advisory as a fix for the BPF tailcall compatibility check. The issue arises in the BPF subsystem where tailcalls could bypass constraints based on an program’s expected_attach_type, potentially enabling a NULL pointer dereferenc...