grlh

desactiva el verificador de ebpf con este único truco extraño como se vio en twitter.com https://twitter.com/bleidl/status/871527499984982016...

CVE-2017-16995

Descripción de la vulnerabilidad Ubuntu es un sistema operativo GNU/Linux de código abierto orientado principalmente a aplicaciones de escritorio, basado en Debian GNU/Linux. Recientemente, un hacker de sombrero blanco reveló que la última versión de Ubuntu Ubuntu 16.04 contiene una vulnerabilida...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – Confusión de Tipos del Verificador eBPF → Lectura/Escritura de Memoria del Kernel Resumen Un sutil desbordamiento de enteros en el seguimiento de límites del verificador eBPF permite a un atacante crear un programa eBPF que accede a memoria del kernel fuera de los límites...

CVE-2022-23222

CVE-2022-23222 Haga clic aquí si solo desea compilar y ejecutar el asunto. Lo que sigue es más o menos una traducción del artículo chino, disponible aquí. Usaremos el código del kernel principal para la versión 5.13.0 como referencia. Hay un desajuste entre los tipos de puntero disponibles y la...

CVE-2017-16995

Linux Kernel Version 4.14 - 4.4 Ubuntu && Debian Descripción Esta vulnerabilidad existe en la llamada al sistema eBPF bpf2 del kernel de Linux. Cuando un usuario proporciona un programa BPF malicioso, provoca errores de cálculo en el módulo validador de eBPF, lo que resulta en problemas de...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis Research implementation demonstrating interaction with Linux eBPF subsystem related to CVE-2021-3490. Includes BPF map creation, syscall wrappers, namespace setup, and verifier analysis. For educational and security research purposes only. CVE-2021-3490 – eBPF Verifier...

CVE-2017-16995

Ubuntu en su versión más reciente Ubuntu 16.04 presenta una vulnerabilidad de escalada de privilegios local de alto riesgo, con el identificador CVE-2017-16995. Esta vulnerabilidad existe en el subsistema del kernel de Linux que invoca a eBPF bpf2; cuando un usuario proporciona un programa BPF...

aeBPF2-analysis

aeBPF2, eBPF verifier scalar-ID pruning vulnerability 한국어 문서...

CVE-2026-53670

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53671

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...

CVE-2026-53706

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53706

PREVAIL is a Polynomial-Runtime eBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4 , the verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag . Because ALU32 arithmetic zero-extends the 32-bit result, the ...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

EUVD-2026-70244

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53670

PREVAIL , a polynomial-runtime eBPF verifier using an abstract interpretation layer, is vulnerable to a verifier bypass prior to version 0.2.4 . In the EbpfTransformer::add() function, offset-variable updates are silently skipped when the destination register carries a non-singleton typeset (two ...

CVE-2026-53671

PREVAIL is a polynomial-runtime eBPF verifier. Prior to version 0.2.4 , its abstract transformer in do_mem_store (src/crab/ebpf_transformer.cpp) silently ignores writes through a T_CTX -typed base register, and the checker's T_CTX bounds arm never tests AccessType::write. An attacker can craft an...