bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.15.162, 6.1.97, 6.6.160, 6.9.8
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() set_memory_ro() can fail, leaving memory unprotected. Check its return and take it into account as an error.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 60a3b2253c413cf601783b070507d7dd6620c954 · fixed in a359696856ca9409fb97655c5a8ef0f549cb6e03; From 60a3b2253c413cf601783b070507d7dd6620c954 · fixed in e4f602e3ff749ba770bf8ff10196e18358de6720; From 60a3b2253c413cf601783b070507d7dd6620c954 · fixed in 2bbfffa802adc30b772d0e0f881a13c3804a965c; From 60a3b2253c413cf601783b070507d7dd6620c954 · fixed in 05412471beba313ecded95aa17b25fe84bb2551a; From 60a3b2253c413cf601783b070507d7dd6620c954 · fixed in 7d2cc63eca0c993c99d18893214abf8f85d566d8
- Linux Linux
3.18
- KernelLinux
From 3.18.0 · fixed in 5.15.162; From 5.16.0 · fixed in 6.1.97; From 6.2.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.9.8