PT-2022-33541 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to an snprintf overflow check in libbpf. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.19.2,...

libbpf:bpf-object-fuzzer: Memcpy-param-overlap in bpf_object__add_programs

Detailed Report: https://oss-fuzz.com/testcase?key=5040003935240192 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x6b2ff800,0xf32ff800 and 0x6e903940, 0xf6903940 Crash...

new packages: libbpf

An update is available for libbpf. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

ALBA-2022:2039 libbpf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

libbpf bug fix and enhancement update

An update is available for libbpf. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

GSD-2022-1002099 libbpf: Fix possible NULL pointer dereference when destroying skeleton

libbpf: Fix possible NULL pointer dereference when destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.110 by commit...

GSD-2022-1001868 libbpf: Fix possible NULL pointer dereference when destroying skeleton

libbpf: Fix possible NULL pointer dereference when destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001855 libbpf: Fix memleak in libbpf_netlink_recv()

libbpf: Fix memleak in libbpfnetlinkrecv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001557 libbpf: Fix possible NULL pointer dereference when destroying skeleton

libbpf: Fix possible NULL pointer dereference when destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001542 libbpf: Fix memleak in libbpf_netlink_recv()

libbpf: Fix memleak in libbpfnetlinkrecv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001248 libbpf: Fix possible NULL pointer dereference when destroying skeleton

libbpf: Fix possible NULL pointer dereference when destroying skeleton This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001227 libbpf: Fix memleak in libbpf_netlink_recv()

libbpf: Fix memleak in libbpfnetlinkrecv This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29500

Name of the Vulnerable Software and Affected Versions libbpf versions prior to v5.17.2 Description The issue is related to a memory leak in the libbpf netlink recv function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.17.2, update t...

PT-2022-29830

Name of the Vulnerable Software and Affected Versions libbpf versions prior to v5.16.19 Description The issue is related to a possible NULL pointer dereference when destroying a skeleton. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-29815

Name of the Vulnerable Software and Affected Versions libbpf versions prior to v5.16.19 Description The issue is related to a memory leak in the libbpf netlink recv function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to v5.16.19, update...

PT-2022-29521

Name of the Vulnerable Software and Affected Versions libbpf versions prior to v5.17.2 Description The issue is related to a possible NULL pointer dereference when destroying a skeleton. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.6 and fixe...

PT-2022-30128

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A memory leak issue was discovered in the libbpf netlink recv function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15.32 Description A possible NULL pointer dereference issue exists when destroying a skeleton in libbpf. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-30372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns a possible NULL pointer dereference when destroying a skeleton in libbpf. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__close

Project: https://github.com/libbpf/libbpf.git Detailed Report: https://oss-fuzz.com/testcase?key=6197297506025472 Project: libbpf Fuzzing Engine: libFuzzer Fuzz Target: bpf-object-fuzzer Job Type: libfuzzerasani386libbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...