CVE-2017-16995

L'ultima versione di Ubuntu Ubuntu 16.04 presenta una vulnerabilità ad alto rischio di elevazione locale dei privilegi, identificata con il codice CVE-2017-16995. La vulnerabilità risiede nel kernel Linux che richiama eBPF bpf2; quando un utente fornisce un programma BPF dannoso che induce un...

CVE-2017-16995

भेद्यता विवरण Ubuntu एक ओपन-सोर्स GNU/Linux ऑपरेटिंग सिस्टम है जो मुख्य रूप से डेस्कटॉप अनुप्रयोगों पर केंद्रित है और Debian GNU/Linux पर आधारित है। हाल ही में एक व्हाइट-हैट हैकर ने Ubuntu के नवीनतम संस्करण Ubuntu 16.04 में एक स्थानीय विशेषाधिकार वृद्धि भेद्यता local privilege escalation...

grlh

disabilita il verifier ebpf con questo strano trucco come visto su twitter.com https://twitter.com/bleidl/status/871527499984982016...

CVE-2022-23222

CVE-2022-23222 Klick hier, wenn du das Ding einfach nur bauen und ausführen willst. Was folgt, ist mehr oder weniger eine Übersetzung des chinesischen Writeups, verfügbar hier. Wir verwenden den Mainline-Kernel-Code für Version 5.13.0 als Referenz. Es gibt eine Diskrepanz zwischen den verfügbaren...

CVE-2017-16995

Versione del kernel Linux 4.14 - 4.4 Ubuntu && Debian Descrizione Questa vulnerabilità risiede nella chiamata di sistema eBPF bpf2 del kernel Linux. Quando un utente fornisce un programma BPF malevolo, il modulo di verifica eBPF genera un errore di calcolo, causando un problema di lettura/scrittu...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – Confusion de type dans le vérificateur eBPF → Lecture/écriture mémoire noyau Vue d'ensemble Un débordement d'entier subtil dans le suivi des bornes du vérificateur eBPF permet à un attaquant de créer un programme eBPF qui accède à de la mémoire noyau hors limites. Sévérité :...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis Forschungsumsetzung, die die Interaktion mit dem Linux-eBPF-Subsystem im Zusammenhang mit CVE-2021-3490 demonstriert. Enthält BPF-Map-Erstellung, Syscall-Wrapper, Namespace-Einrichtung und Verifier-Analyse. Nur für Bildungs- und Sicherheitsforschungszwecke. CVE-2021-34...

explotability_analysis_ebpf

eBPF Verifier Exploit Research — s344024 Romano Simone Resear...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004488 advisory. A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A loc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001564)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001564 advisory. A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A loc...

CVE-2025-40143

In the Linux kernel, the following vulnerability has been resolved: bpf: dont report verifier bug for missing bpfsccvisit on speculative path Syzbot generated a program that triggers a verifierbug call in maybeexitscc. maybeexitscc assumes that, when called for a state with insnidx in some SCC,...

EUVD-2021-33908

Malicious code in bioql PyPI...

EUVD-2021-34027

Malicious code in bioql PyPI...

EUVD-2022-15447

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-3490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The eBPF ALU32 bounds tracking for bitwise ops AND, OR and XOR in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of boun...

Linux Distros Unpatched Vulnerability : CVE-2022-0264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. ...

PT-2024-4768 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to a register invariant violation in the Linux kernel's eBPF verifier. Specifically, it occurs when the verifier analyzes a branch instruction and splits t...

kernel: bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation

A vulnerability was found in the Linux kernel's eBPF verifier function checkstackwrite, where pointer leakage can occur due to insufficient speculative store bypass mitigation. This issue occurs because the original mitigation inserts lfence instructions after initializing a stack slot and spilli...

SUSE CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5790-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5790-1 advisory. It was discovered that the BPF verifier in the Linux kernel did not properly handle internal data structures. A local attacker could use this...