The vulnerability of the copy_verifier_state() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the copyverifierstate function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

bpf: copy_verifier_state() should copy 'loop_entry' field

...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: copyverifierstate should copy the ‘loopentry’ field. The bpfverifierstate.loopentry state should be copied by copyverifierstate. Otherwise, values of .loopentry from unrelated states could corrupt env-curstate. Additionally,...