The vulnerability of the bpf_iter_bits_new() function in the kernel/bpf/helpers.c module, which supports the BPF interpreter for Linux kernels, allows a hacker to trigger a service failure.

The vulnerability of the bpfiterbitsnew function in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

SUSE CVE-2024-50254

In the Linux kernel, the following vulnerability has been resolved: bpf: Free dynamically allocated bits in bpfiterbitsdestroy bpfiterbitsdestroy uses "kit-nrbits kmemleakalloc+0x4b/0x80 kmallocnodenoprof+0x480/0x5c0 alloc.isra.0+0x89/0xb0 allocbulk+0x2af/0x720 prefillmemcache+0x7f/0xb0...

DEBIAN-CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

UBUNTU-CVE-2024-50253

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nrwords in bpfiterbitsnew Check the validity of nrwords in bpfiterbitsnew. Without this check, when multiplication overflow occurs for nrbits e.g., when nrwords = 0x0400-0001, nrbits becomes 64, stack...

PT-2024-34086

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns a vulnerability in the Linux kernel where the function bpf iter bits new does not properly check the validity of nr words. This can lead to stack corruption due to b...

PT-2024-34087

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the bpf iter bits destroy function. The issue arises from an incorrect check for dynamically allocated bits, potential...