1076 matches found
UBUNTU-CVE-2024-43838
In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjustjmpoff adjustjmpoff incorrectly used the insn-imm field for all overflow check, which is incorrect as that should only be done or the BPFJMP32 | BPFJA case, not the general jump instruction case...
DEBIAN-CVE-2024-42281
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gsosize Linearize the skb when downgrading gsosize because it may trigger a BUGON later when the skb is segmented as described in 1,2...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a springboard issue when using BPFTRAMPFCALLORIG...
bpf: Fix overrunning reservations in ringbuf
...
bpf: Fail bpf_timer_cancel when callback is being cancelled
...
bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()
...
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
...
bpf: Fix too early release of tcx_entry
...
CLSA-2024-1723495305 Fix of 19 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-42068 - bpf: Take return from setmemoryro into account with bpfproglockro CVE-url: https://ubuntu.com/security/CVE-2024-42079 - gfs2: Fix NULL pointer dereference in gfs2logflush CVE-url: https://ubuntu.com/security/CVE-2024-42226 - usb: xhci: prevent...
CLSA-2024-1723494706 Fix of 19 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-42068 - bpf: Take return from setmemoryro into account with bpfproglockro CVE-url: https://ubuntu.com/security/CVE-2024-42079 - gfs2: Fix NULL pointer dereference in gfs2logflush CVE-url: https://ubuntu.com/security/CVE-2024-42226 - usb: xhci: prevent...
bpf: Fix remap of arena.
...
SUSE CVE-2024-42239
In the Linux kernel, the following vulnerability has been resolved: bpf: Fail bpftimercancel when callback is being cancelled Given a schedule: timer1 cb timer2 cb bpftimercanceltimer2; bpftimercanceltimer1; Both bpftimercancel calls would wait for the other callback to finish executing,...
kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
A use-after-free flaw was found in the Linux kernel’s BPF functionality. This flaw allows a local user to crash the system...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the net, sunrpc module in the xstcpsetupsocket, where the BPF program may return -EPERM if the connection...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates in the bpf module during a bpftimercancel call, which may result in a deadlock if the callback is being canceled...
The vulnerability of the may_update_sockmap() function in the BPF subsystem of the Linux operating system allows a attacker to compromise the integrity of the protected information.
The vulnerability of the mayupdatesockmap function in the kernel/bpf/verifier.c module of the BPF subsystem of the Linux operating system is related to insufficient privilege checks. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...
SUSE CVE-2024-42068
In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from setmemoryro into account with bpfproglockro setmemoryro can fail, leaving memory unprotected. Check its return and take it into account as an error...
kernel: bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel
A use-after-free flaw was found in the Linux kernel’s BPF functionality. This flaw allows a local user to crash the system...
DEBIAN-CVE-2024-42161
In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPFCOREREADBITFIELD Changes from V1: - Use a default branch in the switch statement to initialize val'. GCC warns that val' may be used uninitialized in the BPFCREREADBITFIELD macro, defined in...
UBUNTU-CVE-2024-42151
In the Linux kernel, the following vulnerability has been resolved: bpf: mark bpfdummystructops.test1 parameter as nullable Test case dummystops/dummyinitretvalue passes NULL as the first parameter of the test1 function. Mark this parameter as nullable to make verifier aware of such possibility...