CVE-2017-17852: Improper Restriction of Operations within the Bounds of a Memory Buffer

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops...

CVE-2017-16995: Improper Restriction of Operations within the Bounds of a Memory Buffer

The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging incorrect sign extension...

CVE-2017-16996: Improper Restriction of Operations within the Bounds of a Memory Buffer

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging register truncation mishandling...

CVE-2017-17855: Improper Restriction of Operations within the Bounds of a Memory Buffer

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars...

CVE-2017-17857: Improper Restriction of Operations within the Bounds of a Memory Buffer

The checkstackboundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations...

CVE-2017-17863: Integer Overflow or Wraparound

kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local users to cause a denial of service integer overflow or invalid memory access or possibly have unspecified other impact...

CVE-2017-17856

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging the lack of stack-pointer alignment enforcement...

CVE-2017-17852

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of 32-bit ALU ops...

CVE-2017-17853

kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging incorrect BPFRSH signed bounds calculations...

CVE-2017-17857

The checkstackboundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations...

CVE-2017-17857

The checkstackboundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging mishandling of invalid variable stack read operations...

PT-2017-15053

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.9 Description The issue is related to the Linux kernel's handling of unreachable code in the kernel/bpf/verifier.c component. This behavior is also considered an improper branch-pruning logic issue. It could...

PT-2017-15055

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.9 Description The issue allows local users to obtain potentially sensitive address information due to a "pointer leak" caused by mishandling states equal comparisons between the pointer data type and the...

PT-2017-15048

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, which may include integer overflow and memory corruption, or possibly have other unspecified impacts. This is achieved by leveraging...

PT-2017-15047

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, potentially resulting in memory corruption, by leveraging incorrect BPF RSH signed bounds calculations in the kernel/bpf/verifier.c fil...

PT-2017-15049

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.8 Description The issue allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging improper use of pointers in place of scalars in the...

PT-2017-15050

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. This is due to the lack of stack-pointer...

PT-2017-14669

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.14.8 Description The issue allows local users to cause a denial of service, potentially resulting in memory corruption, or possibly have other unspecified impacts. This is achieved by leveraging register...

PT-2017-14668

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue is related to the check alu op function in kernel/bpf/verifier.c, which allows local users to cause a denial of service or possibly have other unspecified impacts by leveraging incorrect...

CVE-2017-9150

The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the printbpfinsn function, which allows local users to obtain sensitive address information via crafted bpf system calls...