kernel: bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()

A flaw was found in the Linux kernel's extended Berkeley Packet Filter eBPF subsystem. A privileged local attacker, with CAPSYSADMIN capabilities or root access, could exploit a use-after-free vulnerability in the bpfuprobemultilinkattach function. This issue arises when bpflinkprime fails, leadi...

bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()

...

PT-2024-7580

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a use-after-free vulnerability in the bpf uprobe multi link attach function. If bpf link prime fails, bpf uprobe multi link attach frees the array of bpf uprobes without...