UBUNTU-CVE-2024-47703

In the Linux kernel, the following vulnerability has been resolved: bpf, lsm: Add check for BPF LSM return value A bpf prog returning a positive number attached to fileallocsecurity hook makes kernel panic. This happens because file system can not filter out the positive number returned by the LS...

CVE-2024-47728

CVE-2024-47728 concerns the Linux kernel where a vulnerability in the BPF subsystem could leak memory due to ARG_PTR_TO_{LONG,INT} arguments on error paths. The resolved description indicates the fix zeros the former ARG_PTR_TO_{LONG,INT} inputs for non-tracing helpers when an error occurs, preve...

CVE-2024-47728 bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero former ARGPTRTOLONG,INT args in case of error For all non-tracing helpers which formerly had ARGPTRTOLONG,INT as input arguments, zero the value for the case of an error as otherwise it could leak memory. For tracing, i...

CVE-2024-47703 bpf, lsm: Add check for BPF LSM return value

In the Linux kernel, the following vulnerability has been resolved: bpf, lsm: Add check for BPF LSM return value A bpf prog returning a positive number attached to fileallocsecurity hook makes kernel panic. This happens because file system can not filter out the positive number returned by the LS...

CVE-2024-47703 bpf, lsm: Add check for BPF LSM return value

In the Linux kernel, the following vulnerability has been resolved: bpf, lsm: Add check for BPF LSM return value A bpf prog returning a positive number attached to fileallocsecurity hook makes kernel panic. This happens because file system can not filter out the positive number returned by the LS...

CVE-2024-47703

CVE-2024-47703 — Linux kernel (BPF-LSM return value) details . A BPF program attached to the file_alloc_security LSM hook could cause a kernel panic if the LSM returns a positive value, which the kernel could misinterpret as a file pointer. The issue arises because the positive return was not val...

bpf: Fix a kernel verifier crash in stacksafe()

...

The vulnerability of the do_misc_fixups() function in the Linux kernel’s BPF component allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the domiscfixups function in the kernel/bpf/verifier.c module of the Linux kernel’s BPF component is related to an infinite loop. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

GHSA-4F8R-QQR9-FQ8J vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, melange, neuvector-sigstore-interface, trivy, rekor, apko, gh, tkn, vexctl, zot, spire-server, gitsign, kubescape, policy-controller, cosign, falcoctl, slsa-verifier, aactl, zarf, flux-source-controller, tekton-chains, wolfictl...

CVE-2024-47534 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding, melange, neuvector-sigstore-interface, trivy, rekor, apko, gh, tkn, vexctl, zot, spire-server, gitsign, kubescape, policy-controller, cosign, falcoctl, slsa-verifier, aactl, zarf, flux-source-controller, tekton-chains, wolfictl...

Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft

Even as cyber threats become increasingly sophisticated, the number one attack vector for unauthorized access remains phished credentials Verizon DBIR, 2024. Solving this problem resolves over 80% of your corporate risk, and a solution is possible. However, most tools available on the market toda...

SUSE CVE-2024-45020

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

AZL-49221 CVE-2024-45020 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

UBUNTU-CVE-2024-45020

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

CVE-2024-45020 bpf: Fix a kernel verifier crash in stacksafe()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

CVE-2024-45020 bpf: Fix a kernel verifier crash in stacksafe()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

CVE-2024-45020

Concrete details found: CVE-2024-45020 affects the Linux kernel BPF verifier, specifically a crash in stacksafe() caused by out-of-bounds memory access when iterating old->allocated_stack. The fix adds a check i >= cur->allocated_stack to fail stacksafe() when the condition would access ...

CVE-2024-45020 bpf: Fix a kernel verifier crash in stacksafe()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe. More specifically,...

CVE-2024-45039 gnark's Groth16 commitment extension unsound for more than one commitment

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover is able to choose all but the last commitment. As gnark uses the commitments for optimized...

CVE-2024-45039 gnark's Groth16 commitment extension unsound for more than one commitment

gnark is a fast zk-SNARK library that offers a high-level API to design circuits. Versions prior to 0.11.0 have a soundness issue - in case of multiple commitments used inside the circuit the prover is able to choose all but the last commitment. As gnark uses the commitments for optimized...