CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908 bpf: Use correct permission flag for mixed signed bounds arithmetic

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

PT-2021-28490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.31 Description The issue concerns incorrect permission flags used for mixed signed bounds arithmetic in the bpf component. This problem was introduced in version v5.8 and fixed in version v5.10.32. The...

PT-2021-24486

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.11.15 Description: The issue concerns incorrect permission flags used for mixed signed bounds arithmetic in the bpf component. This problem was introduced in version v5.8 and fixed in version v5.11.16. Th...

PT-2021-28480

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.11.15 Description: The issue concerns incorrect permission flags used for mixed signed bounds arithmetic in the bpf component. This problem was introduced in version v5.8 and fixed in version v5.11.16. Th...

PT-2021-24496

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.10.31 Description: The issue concerns incorrect permission flag usage for mixed signed bounds arithmetic in the bpf component. The actual impact and potential for attacks have not been proven yet...