476 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003260)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003260 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003018)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003018 advisory. In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier permits out-of-bounds memory...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000882)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000882 advisory. The replacemapfdwithmapptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local use...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: bpf: Accounting for the currently allocated stack depth in widenimprecisescalars The usage pattern of widenimprecisescalars is as follows: python prevst = findpreventryenv, ...; queuedst = pushstack...; widenimprecisescalarsenv,...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: BPF: Rejects negative offsets for ALU operations When verifying BPF programs, the checkaluop function validates instructions that involve ALU operations. The “offset” field in these instructions is a signed 16-bit integer. The...
ROS-20260113-7364
A vulnerability in the checkhelpermemaccess function of the kernel/bpf/verifier.c module of the Linux operating system kernel is related to bugs in the code . Exploitation of the vulnerability could allow an attacker to affect the integrity and availability of protected information...
ROS-20260113-7328
A vulnerability in the checkfuncarg function of the kernel/bpf/verifier.c module of the Linux kernel is related to improper control of resource identifiers "resource injection". Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000300)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000300 advisory. kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of...
CVE-2023-54181
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allowptrleaks After we converted the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. Because it failed the bpf verifier, a...
EUVD-2023-60460
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allowptrleaks After we converted the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. Because it failed the bpf verifier, a...
CVE-2023-54181
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allowptrleaks After we converted the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. Because it failed the bpf verifier, a...
UBUNTU-CVE-2023-54181
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allowptrleaks After we converted the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. Because it failed the bpf verifier, a...
CVE-2023-54181
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix issue in verifying allowptrleaks After we converted the capabilities of our networking-bpf program from capsysadmin to capnetadmin+capbpf, our networking-bpf program failed to start. Because it failed the bpf verifier, a...
CVE-2023-54181
CVE-2023-54181 concerns the Linux kernel BPF verifier: after migrating networking-bpf capabilities from cap_sys_admin to cap_net_admin+cap_bpf, the verifier incorrectly flagged a two-pointer comparison as a leak, blocking program startup. A patch fixes the allow_ptr_leaks check, addressing the fa...
UBUNTU-CVE-2023-54145
In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...
CVE-2023-54145
In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...
CVE-2023-54145 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log
In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...
Linux Distros Unpatched Vulnerability : CVE-2023-54145
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger verifier log line truncated warning, as verifier has a...
EUVD-2025-203688
In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth in widenimprecisescalars The usage pattern for widenimprecisescalars looks as follows: prevst = findpreventryenv, ...; queuedst = pushstack...; widenimprecisescalarsenv, prevst,...
CVE-2025-68208
In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth in widenimprecisescalars The usage pattern for widenimprecisescalars looks as follows: prevst = findpreventryenv, ...; queuedst = pushstack...; widenimprecisescalarsenv, prevst,...