CVE-2026-98019

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. The verifier failed to mark scalar registers as precise when checking null function arguments and specific helper call parameters, causing its state-tracking logic to improperly prune verification paths. A local attacker...

CVE-2017-16995

CVE-2017-16995 ID CVE: CVE-2017-16995 Date de publication: 2017-12-27T17:08:17.670 Score de base CVSS 3.0/3.1: 7.8 Description: La fonction checkaluop dans kernel/bpf/verifier.c du noyau Linux jusqu'à la version 4.4 permet aux utilisateurs locaux de provoquer un déni de service corruption mémoire...

CVE-2026-16513 Missing write validation of user-supplied handle pointer in the RTIO syscall verifier allows arbitrary kernel write

The userspace verifier zvrfyrtiosqecopyingethandles in subsys/rtio/rtiosyscalls.c subsys/rtio/rtiohandlers.c before v4.3.0 validated the RTIO object handle and the sqes input array, but not the handle out-parameter. On the first loop iteration it executed handle = sqe, storing the kernel address ...

CVE-2026-98151

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. A local user can trigger a Denial of Service DoS or kernel verification failure by loading a specially crafted BPF program containing speculative pointer arithmetic. This issue occurs because register subregister bounds a...

CVE-2026-98134

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. During pointer register comparisons, the verifier can incorrectly deduce that a pointer cannot be null when it can actually be null at runtime. A local user with permissions to load BPF programs could exploit this flaw by...

CVE-2026-98132

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local attacker with permission to load BPF programs could exploit this flaw to achieve privilege escalation or cause a Denial of Service DoS. This issue arises when the verifier improperly handles scalar values stored o...

CVE-2017-16995

Description de la vulnérabilité Ubuntu est un système d'exploitation GNU/Linux open source principalement destiné aux applications de bureau, basé sur Debian GNU/Linux. Récemment, un hacker éthique a révélé que la dernière version d'Ubuntu Ubuntu 16.04 présente une vulnérabilité d'élévation de...

CVE-2022-23222

CVE-2022-23222 Cliquez ici si vous voulez juste compiler et exécuter le truc. Ce qui suit est plus ou moins une traduction du writeup chinois, disponible ici. Nous utiliserons le code du noyau mainline pour la version 5.13.0 comme référence. Il y a une inadéquation entre les types de pointeurs...

CVE-2017-16995

Version du noyau Linux 4.14 - 4.4 Ubuntu && Debian Description Cette vulnérabilité existe dans l'appel système eBPF bpf2 du noyau Linux. Lorsqu'un utilisateur fournit un programme BPF malveillant, le module de validation eBPF produit une erreur de calcul, entraînant un problème de lecture/écritur...

cve-2021-3490-ebpf-analysis

cve-2021-3490-ebpf-analysis Implémentation de recherche démontrant l'interaction avec le sous-système eBPF de Linux lié à CVE-2021-3490. Inclut la création de maps BPF, des wrappers d'appels système, la configuration des espaces de noms et l'analyse du vérificateur. À des fins éducatives et de...

CVE-2017-16995

La dernière version d'Ubuntu Ubuntu 16.04 présente une vulnérabilité locale d'élévation de privilèges à haut risque, référencée CVE-2017-16995. Cette vulnérabilité réside dans le système du noyau Linux qui appelle eBPF bpf2. Lorsqu'un utilisateur fournit un programme BPF malveillant provoquant un...

CVE-2026-100543 OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash

OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...

CVE-2026-100543 OpenClaw before 2026.8.1 Information Disclosure via Configuration Hash

OpenClaw npm package openclaw before 2026.8.1 could include deterministic hashes computed over the original, unredacted configuration in redacted configuration responses. When the Gateway password had low entropy and the remaining configuration values were reconstructable, these hashes acted as...

SUSE CVE-2026-98151

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an example: r0 = bpfmaplookupelem... / PTRTOMAPVALUE, offset 0 / ... 14: r0 += r1 / r1 is a bounded scalar / 15: r9 = ...

CVE-2026-98151

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an example: r0 = bpfmaplookupelem... / PTRTOMAPVALUE, offset 0 / ... 14: r0 += r1 / r1 is a bounded scalar / 15: r9 = ...

DEBIAN-CVE-2026-98151

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an example: r0 = bpfmaplookupelem... / PTRTOMAPVALUE, offset 0 / ... 14: r0 += r1 / r1 is a bounded scalar / 15: r9 = ...

DEBIAN-CVE-2026-98134

In the Linux kernel, the following vulnerability has been resolved: bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug occurs when two pointers are compared and one of them has a type w/o...

AZL-104874 CVE-2026-98134 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug occurs when two pointers are compared and one of them has a type w/o...

CVE-2026-98134

In the Linux kernel, the following vulnerability has been resolved: bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug occurs when two pointers are compared and one of them has a type w/o...

AZL-104294 CVE-2026-98084 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks When processing calls to bpfloop verifier marks R1 and R4 as precise. R1 tracks loop iterations number and because of the 'callbackdepth R1' mechanics in...