kernel: samples/bpf: Fix buffer overflow in tcp_basertt

A buffer overflow was found in the BPF sample code tcpbasertt. Incorrect buffer size calculation could cause out-of-bounds writes when copying string data...

kernel: bpf: Address KCSAN report on bpf_lru_list

A data race was found in the BPF LRU list implementation. Concurrent access to node-ref without proper memory barriers triggers KCSAN warnings, though the race is benign as the reference value does not need to be precise...

kernel: bpf: Make bpf_refcount_acquire fallible for non-owning refs

A memory-safety flaw was found in the Linux kernel extended Berkeley Packet Filter eBPF subsystem in the way reference counts are acquired for objects after a failed tree insertion. When a program attempts to acquire a reference to a node that may already have been released, the reference count...

kernel: lwt: Fix return values of BPF xmit ops

In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return different types of positive values, such like NETRXDROP, NETXMITCN, NETDEVTXBUSY, and so on, from function skbdoredirect and bpflwtxmitreroute. At the xmit hook, suc...

kernel: Linux kernel: BPF verifier log truncation via crafted user input

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier log. A local user can exploit this by providing excessively long BPF Type Format BTF names or BTF.ext source code line strings. This can lead to the truncation of a single verifier log line, potentially obscuring important...

kernel: Linux kernel: Denial of Service due to file descriptor leak in BPF sample code

A flaw was found in the Linux kernel. This vulnerability, a file descriptor leak, occurs in the samples/bpf component when the fout file pointer is opened but not properly closed in the hbm's runbpfprog function. A local attacker could exploit this by repeatedly triggering the flaw, leading to...

PT-2024-28072

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue concerns the Linux kernel, where a vulnerability has been resolved by adding BPF PROG TYPE CGROUP SKB attach type enforcement in BPF LINK CREATE. The bpf prog attach function uses...

SUSE CVE-2024-26906

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disallow vsyscall page read for copyfromkernelnofault When trying to use copyfromkernelnofault to read vsyscall page through a bpf program, the following oops was reported: BUG: unable to handle page fault for address:...

PT-2024-29776

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's bpf Berkeley Packet Filter functionality. A test case, dummy st ops/dummy init ret value, passes a NULL value as the first parameter to the tes...

Important: Red Hat Security Advisory: bind and bind-dyndb-ldap security updates

Updates for bind and bind-dyndb-ldap are now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: bind and dhcp security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. The Dynamic Hos...

Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel

Cybersecurity researchers have disclosed what they say is the "first native Spectre v2 exploit" against the Linux kernel on Intel systems that could be exploited to read sensitive data from the memory. The exploit, called Native Branch History Injection BHI, can be used to leak arbitrary kernel...

berkeleycatering.co.uk Cross Site Scripting vulnerability OBB-3904657

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UBUNTU-CVE-2024-26737

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix racing between bpftimercancelandfree and bpftimercancel The following race is possible between bpftimercancelandfree and bpftimercancel. It will lead a UAF on the timer-timer. bpftimercancel; spinlock; t = timer-time;...

Important: Red Hat Security Advisory: bind9.16 security update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

LoongArch: BPF: Prevent out-of-bounds memory access

...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a faulty SELinux lockdown permission check in the bpf, lockdown, audit module...

engineering.berkeley.edu Cross Site Scripting vulnerability OBB-3870785

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe

An incorrect verifier pruning flaw was found in BPF in the Linux Kernel that may lead to unsafe code paths incorrectly marked as safe, resulting in arbitrary read/writes in kernel memory, lateral privilege escalation, and container escape...

kernel: bpf: Incorrect verifier pruning leads to unsafe code paths being incorrectly marked as safe

An incorrect verifier pruning flaw was found in BPF in the Linux Kernel that may lead to unsafe code paths incorrectly marked as safe, resulting in arbitrary read/writes in kernel memory, lateral privilege escalation, and container escape...