blob: 4f45ea089ddb4d7a52822e63b92a63ca37f79f63 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
Description: bpf: Prohibit alu ops for pointer types not defining ptr_limit
References:
https://www.openwall.com/lists/oss-security/2021/03/19/2
https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/patch/?id=f232326f6966cf2a1d1db7bc917a4ce5f9f55f76
Notes:
bwh> I believe this does not apply to 4.9 for the same reason that
bwh> CVE-2019-7308 does not.
Bugs:
upstream: released (5.12-rc5) [f232326f6966cf2a1d1db7bc917a4ce5f9f55f76]
5.10-upstream-stable: released (5.10.25) [c4d37eea1c641a9319baf34253cc373abb39d3e1]
4.19-upstream-stable: released (4.19.182) [bc49612a0e2c379a0d997375901c5371ba015518]
4.9-upstream-stable: N/A "Vulnerability introduced later"
sid: released (5.10.24-1) [bugfix/all/bpf-Prohibit-alu-ops-for-pointer-types-not-defining-.patch]
4.19-buster-security: released (4.19.181-1) [bugfix/all/bpf-Prohibit-alu-ops-for-pointer-types-not-defining-.patch]
4.9-stretch-security: N/A "Vulnerability introduced later"
|
