In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero. Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero. Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero. Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.

In the Linux kernel, the following vulnerability has been resolved: b ...

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from htab_lock_bucket() to userspace In __htab_map_lookup_and_delete_batch() if htab_lock_bucket() returns -EBUSY, it will go to next bucket. Going to next bucket may not only skip the elements in current bucket silently, but also incur out-of-bound memory access or expose kernel memory to userspace if current bucket_cnt is greater than bucket_size or zero. Fixing it by stopping batch operation and returning -EBUSY when htab_lock_bucket() fails, and the application can retry or skip the busy batch as needed.

Уязвимость функции __htab_map_lookup_and_delete_batch() модуля kernel/bpf/hashtab.c поддержки интерпретатора BPF ядра операционной системы Linux, позволяющая нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании

Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)

Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP4)