PT-2024-41802

Уязвимость функции bpf prog attach check attach type модуля kernel/bpf/syscall.c поддержки интерпретатора BPF ядра операционной системы Linux связана с некорректной инициализацией ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2021-4001: Time-of-check Time-of-use (TOCTOU) Race Condition

A race condition was found in the Linux kernel's ebpf verifier between bpfmapupdateelem and bpfmapfreeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege capsysadmin or capbpf can modify the frozen mapped address space. This flaw affects kernel...

PT-2021-2612

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.11.11 Description An issue in the Linux kernel's BPF subsystem can cause a system crash due to improper handling of intentionally uninitialized variables resolved ids and resolved sizes in the vmlinux BPF Type...