In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf(). syzbot reported that the netfilter bpf prog can be called without migration disabled…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf(). syzbot reported that the netfilter bpf prog can be called without migration disabled in xmit path. Then the assertion in __bpf_prog_run() fails, triggering the splat below. [0] Let's use bpf_prog_run_pin_on_cpu() in nf_hook_run_bpf(). [0]: BUG: assuming non migratable context at ./include/linux/filter.h:703 in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 5829, na…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0a356da16fb933abbeeb7aea038c351f3342cd3f Patch
- https://git.kernel.org/stable/c/17ce3e5949bc37557305ad46316f41c7875d6366 Patch
- https://git.kernel.org/stable/c/62f6175d145e00fc999fd2fcbffad3f59253c66a Patch
- https://git.kernel.org/stable/c/e0199c28167a8a4adec036005a8df268b2b68529 Patch
- https://git.kernel.org/stable/c/ee2502485702e4398cd74dbfb288bfa111d25e62 Patch
Timeline
- nvd_ingest NVD