In the Linux kernel, the following vulnerability has been resolved:
bpf, lsm: Add check for BPF LSM return value
A bpf prog returning a positive number attached to file_alloc_security
hook makes kernel panic.
This happens because file system can not filter out the positive number
returned by the LSM prog using IS_ERR, and misinterprets this positive
number as a file pointer.
Given that hook file_alloc_security never returned positive number
before the introduction of BPF LSM, and other BPF LSM hooks may
encounter similar issues, this patch adds LSM return value check
in verifier, to ensure no unexpected value is returned.
References
Configurations
Configuration 1 (hide)
|
History
24 Oct 2024, 13:33
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Linux
Linux linux Kernel |
|
| References | () https://git.kernel.org/stable/c/5d99e198be279045e6ecefe220f5c52f8ce9bfd5 - Patch | |
| References | () https://git.kernel.org/stable/c/27ca3e20fe80be85a92b10064dfeb56cb2564b1c - Patch | |
| References | () https://git.kernel.org/stable/c/1050727d83e70449991c29dd1cf29fe936a63da3 - Patch |
21 Oct 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-21 12:15
Updated : 2024-10-24 13:33
NVD link : CVE-2024-47703
Mitre link : CVE-2024-47703
JSON object : View
Products Affected
linux
- linux_kernel
CWE