CVE-2017-16995

An arbitrary memory r/w access issue was found in the Linux kernel compiled with the eBPF bpf2 system call CONFIGBPFSYSCALL support. The issue could occur due to calculation errors in the eBPF verifier module, triggered by user supplied malicious BPF program. An unprivileged user could use this...

CVE-2017-16995

The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging incorrect sign extension...

Linux BPF doubleput UAF Privilege Escalation

Linux kernel 4.4 'Linux BPF doubleput UAF Privilege Escalation', 'Description' = %q Linux kernel 4.4 4.5.5 extended Berkeley Packet Filter eBPF does not properly reference count file descriptors, resulting in a use-after-free, which can be abused to escalate privileges. The target system must be...