PT-2024-9228

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.9.0 Description: The vulnerability is related to a race condition between the sock map close and sk psock put functions in the Linux kernel. This can cause a null pointer dereference when the refcount of psock...

DEBIAN-CVE-2023-52735

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sockmapclose,destroy,unhash call itself sockmap proto callbacks should never call themselves by design. Protect against bugs like 1 and break out of the recursive loop to avoid a stack overflow in favor of...

kernel: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sockmapclose,destroy,unhash call itself sockmap proto callbacks should never call themselves by design. Protect against bugs like 1 and break out of the recursive loop to avoid a stack overflow in favor of...

PT-2023-35399

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 6.1.13 Description The issue is related to the bpf and sockmap components. It prevents sock map close,destroy,unhash from calling itself. The actual impact and attack plausibility have not yet been proven...

SUSE CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

PT-2023-9728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the sock map close,destroy,unhash functions in the Linux kernel, which can cause a stack overflow due to infinite recursion. This can potentially allow a remote...

PT-2023-34525

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A race condition exists in the sock map free function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2023-33816

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A race condition exists in the sock map free function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v6.0.16, update to...

PT-2023-34220

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A race condition exists in the sock map free function related to bpf and sockmap. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

The vulnerability in the implementation of the dev_map_init_map and sock_map_alloc functions in the Linux kernel allows a hacker to trigger a system crash or enhance their privileges.

The vulnerability of the devmapinitmap and sockmapalloc functions in the Linux kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause the system to crash or increase their privileges...

DEBIAN-CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

UBUNTU-CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...