Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link info In bpf_link_show_fdinfo and bpf_link_get_info_by_fd, link->prog is accessed without holding any locks. If the prog is concurrently replaced via bpf_link_update, the old prog can be freed, leading to a potential UAF issue. Fix this by accessing link->prog under RCU protection to safely fetch the pointer and guarantee its lifetime while reading its fields.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0c991ebc8c69d29b7fc44db17075c5aa5253e2ab to < 4c8432a332d4a24dc2742f56062a53d8fad36f53affected0c991ebc8c69d29b7fc44db17075c5aa5253e2ab to < a5c936ac904767fc1d943d40b0308bcb2ae2509baffected0c991ebc8c69d29b7fc44db17075c5aa5253e2ab to < d7d7208e2603b45724b684f4df73904fb347741eaffected0c991ebc8c69d29b7fc44db17075c5aa5253e2ab to < 85cf991c881e7198be32be05a9daa2625390c8b3affected0c991ebc8c69d29b7fc44db17075c5aa5253e2ab to < 79347e42cfbc9e78872922e8f08a70609c9af82faffected0c991ebc8c69d29b7fc44db17075c5aa5253e2ab to < 863f3ddd0b8ac65abfb50d3be0869268ac0e277baffected
Linux Linux
Default version status: affected
5.7affected0 to < 5.7unaffected6.1.191 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4c8432a332d4a24dc2742f56062a53d8fad36f53 ↗
- https://git.kernel.org/stable/c/a5c936ac904767fc1d943d40b0308bcb2ae2509b ↗
- https://git.kernel.org/stable/c/d7d7208e2603b45724b684f4df73904fb347741e ↗
- https://git.kernel.org/stable/c/85cf991c881e7198be32be05a9daa2625390c8b3 ↗
- https://git.kernel.org/stable/c/79347e42cfbc9e78872922e8f08a70609c9af82f ↗
- https://git.kernel.org/stable/c/863f3ddd0b8ac65abfb50d3be0869268ac0e277b ↗