blob: 984bf8b5935f59476bbde4a52e31a94bc1e92c91 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
Description: bpf: Fix out of bounds access from invalid *_or_null type verification
References:
https://www.openwall.com/lists/oss-security/2022/01/13/1
https://www.openwall.com/lists/oss-security/2022/01/18/2
Notes:
carnil> For stable series in 5.10.y, 5.15.y and 5.16.y the commit "bpf:
carnil> Fix out of bounds access from invalid *_or_null type
carnil> verification" was backported for fixing the issue as the issue
carnil> was fixed in mainline through the larger refactoring in
carnil> c25b2ae136039ffa820c26138ed4a5e5f3ab3841.
carnil> Fixed as well in 5.16.1 for 5.16.y, 5.15.15 for 5.15.y.
Bugs:
upstream: pending [c25b2ae136039ffa820c26138ed4a5e5f3ab3841]
5.10-upstream-stable: released (5.10.92) [35ab8c9085b0af847df7fac9571ccd26d9f0f513]
4.19-upstream-stable: N/A "Vulnerable code not present"
4.9-upstream-stable: N/A "Vulnerable code not present"
sid: released (5.15.15-1)
5.10-bullseye-security: pending (5.10.92-1)
4.19-buster-security: N/A "Vulnerable code not present"
4.9-stretch-security: N/A "Vulnerable code not present"
|
