Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment BPF LSM programs can currently attach to xfrm_decode_session(). That hook may return an error, but security_skb_classify_flow() calls it from a void path and triggers BUG_ON() if an error is returned. Disable BPF attachment to the hook to prevent a BPF LSM program from turning packet classification into a full panic.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9e4e01dfd3254c7f04f24b7c6b29596bc12332f3 to < aa265d47308775c5501073b08133623bcb5421f9affected9e4e01dfd3254c7f04f24b7c6b29596bc12332f3 to < 6b44c6660aa1c9b843e450a623ac4a8484919dceaffected9e4e01dfd3254c7f04f24b7c6b29596bc12332f3 to < 4ae780d173ef40d4f7cb76935dc2d55fbf380009affected9e4e01dfd3254c7f04f24b7c6b29596bc12332f3 to < 49fa1be621dde8f526d36e5791aded8fafda1e9caffected9e4e01dfd3254c7f04f24b7c6b29596bc12332f3 to < 1bb3b6a5c3c5cc814eae4ff0212fdced36f8bce9affected9e4e01dfd3254c7f04f24b7c6b29596bc12332f3 to < 12091470c6b4c1c14b2de12dcbae2ada6cb6d20baffected
Linux Linux
Default version status: affected
5.7affected0 to < 5.7unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/aa265d47308775c5501073b08133623bcb5421f9 ↗
- https://git.kernel.org/stable/c/6b44c6660aa1c9b843e450a623ac4a8484919dce ↗
- https://git.kernel.org/stable/c/4ae780d173ef40d4f7cb76935dc2d55fbf380009 ↗
- https://git.kernel.org/stable/c/49fa1be621dde8f526d36e5791aded8fafda1e9c ↗
- https://git.kernel.org/stable/c/1bb3b6a5c3c5cc814eae4ff0212fdced36f8bce9 ↗
- https://git.kernel.org/stable/c/12091470c6b4c1c14b2de12dcbae2ada6cb6d20b ↗