1043 matches found
DEBIAN-CVE-2022-50253
In the Linux kernel, the following vulnerability has been resolved: bpf: make sure skb-len != 0 when redirecting to a tunneling device syzkaller managed to trigger another case where skb-len == 0 when we enter devqueuexmit: WARNING: CPU: 0 PID: 2470 at include/linux/skbuff.h:2576 skbassertlen...
bpf: Forget ranges when refining tnum after JSET
...
CVE-2025-39748
In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call bpfgetnetnscookie 1: if r0 == 0 goto 2: if r0 & Oxffffffff goto The issue ...
UBUNTU-CVE-2025-39748
In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kernel warning due to a range invariant violation on the following BPF program. 0: call bpfgetnetnscookie 1: if r0 == 0 goto 2: if r0 & Oxffffffff goto The issue ...
PT-2025-44147
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc1-g2465bb83e0b4 Description The Linux kernel contains a flaw related to how return values from BPF Berkeley Packet Filter programs are handled, specifically when dealing with struct operations on the...
LoongArch: BPF: Fix jump offset calculation in tailcall
...
UBUNTU-CVE-2025-38723
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpfintjitcompile skips JIT context initialization which essentially skips offset calculation leaving outoffset = -1, so the jmpoffset in emitbpftailcall is...
CVE-2025-38723
CVE-2025-38723 concerns the Linux kernel, specifically LoongArch BPF tailcall handling. The issue arises in the tailcall jump offset calculation when bpf_int_jit_compile() fails to initialize the JIT context, leaving out_offset = -1. Consequently, the computed jmp_offset = (out_offset - cur_offse...
bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
...
bpf: copy_verifier_state() should copy 'loop_entry' field
...
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
...
bpf: Disable migration in nf_hook_run_bpf().
...
bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
...
bpf: Prevent tail call between progs attached to different hooks
...
bpf: support non-r10 register spill/fill to/from stack in precision tracking
...
bpf: Do not include stack ptr register in precision backtracking bookkeeping
...
bpf: Prevent tailcall infinite loop caused by freplace
...
bpf: Remove tst_run from lwt_seg6local_prog_ops.
...