摘要:
In the Linux kernel, the following vulnerability has been resolved:bpf: Avoid splat in pskb_pull_reasonsyzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debughint in pskb_may_pull.We d like to retain this debug check because it might hint at integeroverflows and other issues (kernel code should pull headers, not hugevalue).In bpf case, this splat isn t interesting at all: such (nonsensical)bpf programs are typically generated by a fuzzer anyway.Do what Eric suggested and suppress such warning.For CONFIG_DEBUG_NET=n we don t need the extra check becausepskb_may_pull will do the right thing: return an error without theWARN() backtrace.
安全等级: Low
公告ID: KylinSec-SA-2024-3338
发布日期: 2024年8月21日
关联CVE: CVE-2024-40996
In the Linux kernel, the following vulnerability has been resolved:bpf: Avoid splat in pskb_pull_reasonsyzkaller builds (CONFIG_DEBUG_NET=y) frequently trigger a debughint in pskb_may_pull.We d like to retain this debug check because it might hint at integeroverflows and other issues (kernel code should pull headers, not hugevalue).In bpf case, this splat isn t interesting at all: such (nonsensical)bpf programs are typically generated by a fuzzer anyway.Do what Eric suggested and suppress such warning.For CONFIG_DEBUG_NET=n we don t need the extra check becausepskb_may_pull will do the right thing: return an error without theWARN() backtrace.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|
