UBUNTU-CVE-2022-50259

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix race in sockmapfree sockmapfree calls releasesocksk without owning a reference on the socket. This can cause use-after-free as syzbot found 1 Jakub Sitnicki already took care of a similar issue in sockhashfree i...

CVE-2022-50259 bpf, sockmap: fix race in sock_map_free()

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix race in sockmapfree sockmapfree calls releasesocksk without owning a reference on the socket. This can cause use-after-free as syzbot found 1 Jakub Sitnicki already took care of a similar issue in sockhashfree i...

CVE-2022-50259

CVE-2022-50259 : In the Linux kernel, the bpf sock_map_free() path can trigger use-after-free because sock_map_free() calls release_sock(sk) without holding a socket reference. This race is evidenced by syzbot tracing and mirrors a related issue fixed in sock_hash_free() (commit referenced). The ...