The vulnerability of the bpf_local_storage_update() function in the kernel/bpf/bpf_local_storage.c module allows a hacker to cause a service failure.

The vulnerability of the bpflocalstorageupdate function in the kernel/bpf/bpflocalstorage.c file, which is part of the Linux kernel’s BPF support for operating system functions, relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2023-53857

CVE-2023-53857: Linux kernel BPF local storage fix. The issue arises when a bpf local storage update path acquires a local_lock while a raw_spin_lock is held, potentially enabling an unsafe memory allocation context in tracing. The patch ensures kzalloc occurs before acquiring the lock (pre-raw_s...

CVE-2023-53857 bpf: bpf_sk_storage: Fix invalid wait context lockdep report

In the Linux kernel, the following vulnerability has been resolved: bpf: bpfskstorage: Fix invalid wait context lockdep report './testprogs -t testlocalstorage' reported a splat: 27.137569 ============================= 27.138122 BUG: Invalid wait context 27.138650 6.5.0-03980-gd11ae1b16b0a 247...

PT-2025-49748

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-03980-gd11ae1b16b0a 247 Description The Linux kernel contains a flaw in the bpf sk storage component related to an invalid wait context lock dependency report. Specifically, the issue arises from attempting...