Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a flaw in the BPF subsystem that can also cause deadlocks...

The vulnerability of the nilfs_attach_log_writer function (fs/nilfs2/segment.c) in the Linux kernel’s BPF component allows a attacker to cause a service failure.

The vulnerability of the nilfsattachlogwriter function located in segment.c of fs/nilfs2 in the Linux kernel’s BPF component is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-49748

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-03980-gd11ae1b16b0a 247 Description The Linux kernel contains a flaw in the bpf sk storage component related to an invalid wait context lock dependency report. Specifically, the issue arises from attempting...

PT-2022-36552 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to an alignment problem in the bpf prog test run skb function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the eBPF subsystem in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

kernel: bpf, cpumap: Handle skb as well when clean up ptr_ring

An incorrect object type handling flaw was found in the Linux kernel's BPF cpumap implementation in the cleanup path. A local user can trigger this issue by running XDP redirect operations in SKB mode with the cpumap, causing the cleanup code to incorrectly treat socket buffers as XDP frames when...

UBUNTU-CVE-2022-3623

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function followpagepte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remotely. It is recommended to apply a patch...

Linux Kernel BPF af_unix.c unix_release_sock memory leak

...

DEBIAN-CVE-2022-3543

A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function unixsockdestructor/unixreleasesock of the file net/unix/afunix.c of the component BPF. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that originates from an affected function unixsockdestructor/unixreleasesock in the net/unix/afunix.c file of the component BPF, which could lead to a...

PT-2022-7352 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a memory leak in the test fentry function of the BPF component in the Linux kernel. This can be exploited to cause a denial of service. Recommendations: At the...

PT-2022-7368 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a memory leak in the get syms function of the BPF component in the Linux kernel. This could allow a remote attacker to cause a denial of service. Recommendation...

The vulnerability of the bpf_sys_bpf() function in the Linux operating system’s BPF subsystem allows a hacker to gain unauthorized access to protected information.

The vulnerability of the bpfsysbpf function in the Linux kernel’s BPF subsystem stems from the operation of pushing data out of the buffer into memory during pointer initialization. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Arbitrary Memory read in BPF Linux Kernel

...

DEBIAN-CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

The vulnerability of the verifier functions ebpf in the bpf_map_update_elem and bpf_map_freeze components of the Linux operating system’s kernel/bpf/syscall.c module allows a attacker to compromise data integrity.

The vulnerability of the verifier functions ebpf in the bpfmapupdateelem and bpfmapfreeze components of the Linux operating system’s kernel/bpf/syscall.c file is related to the absence of locking mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity...

An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.

...

PT-2022-33273 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue concerns array range checking for poke descriptors in the bpf module. It was introduced in version v5.5 and fixed in version v5.19.6. The actual impact and attack plausibility have...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to disclose protected information.

The vulnerability of the eBPF subsystem in the Linux operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to gain unauthorized access to a device.

The vulnerability of the eBPF subsystem in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...