Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
423f16108c9d832bd96059d5c882c8ef6d76eb96 to < 452a927cddcd67478d030e646f41cb904a93156faffected423f16108c9d832bd96059d5c882c8ef6d76eb96 to < f0fc2a9828171205244a28013f02889f50b71c9faffected423f16108c9d832bd96059d5c882c8ef6d76eb96 to < 26b380a3ca0b605fd8860995ed6a208f276dd316affected423f16108c9d832bd96059d5c882c8ef6d76eb96 to < 0d918263c9bfc86078edb2e2f7302a0c6ce42b7caffected423f16108c9d832bd96059d5c882c8ef6d76eb96 to < 281f2a214565a5cbf8b7355a65738d80bd19b8c5affected423f16108c9d832bd96059d5c882c8ef6d76eb96 to < 989f1b93907de1753a814996222da375f07e579baffected423f16108c9d832bd96059d5c882c8ef6d76eb96 to < beaf0e96b1da74549a6cabd040f9667d83b2e97eaffected
Linux Linux
Default version status: affected
5.11affected0 to < 5.11unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.141 to ≤ 6.6.*unaffected6.12.91 to ≤ 6.12.*unaffected6.18.33 to ≤ 6.18.*unaffected7.0.10 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/452a927cddcd67478d030e646f41cb904a93156f ↗
- https://git.kernel.org/stable/c/f0fc2a9828171205244a28013f02889f50b71c9f ↗
- https://git.kernel.org/stable/c/26b380a3ca0b605fd8860995ed6a208f276dd316 ↗
- https://git.kernel.org/stable/c/0d918263c9bfc86078edb2e2f7302a0c6ce42b7c ↗
- https://git.kernel.org/stable/c/281f2a214565a5cbf8b7355a65738d80bd19b8c5 ↗
- https://git.kernel.org/stable/c/989f1b93907de1753a814996222da375f07e579b ↗
- https://git.kernel.org/stable/c/beaf0e96b1da74549a6cabd040f9667d83b2e97e ↗