Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a failed lock acquisition returns -EBUSY without writing it. Clear the output before returning -EBUSY so BPF programs cannot observe uninitialized stack contents after a failed helper call.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before a6090eeb289c5fa45f7b629befac2bd3c19a6dae; affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before 23b4bcc79bab5285275912b94e98c286f281de75; affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before 1534c4bff3aaca19c4c9a82f93e9b81f7c983de3; affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before e2396b8a562073787e627a5f483f1bc5c452fa6a; affected a34a9f1a19afe9c60ca0ea61dfeee63a1c2baac8 before 7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232; affected 40e34ea01748e5b8afdd40a172868be1e1ab0ede; affected 388c9d3eefaea99828ee5000c693128a5b41ee7c; affected acabf5df49aa3a4f9c96200102d893351b511a88; affected e388671635acf470f0986d874389148fd234620b; affected 232f0ba4d69263af5912e279fcc32fef2882b1dc; affected 5.4.258 before 5.5; affected 5.10.198 before 5.11; affected 5.15.134 before 5.16; affected 6.1.56 before 6.2; affected 6.5.6 before 6.6 |
| Linux / Linux | affected 6.6; unaffected 0 before 6.6; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.52 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/a6090eeb289c5fa45f7b629befac2bd3c19a6dae
- https://git.kernel.org/stable/c/23b4bcc79bab5285275912b94e98c286f281de75
- https://git.kernel.org/stable/c/1534c4bff3aaca19c4c9a82f93e9b81f7c983de3
- https://git.kernel.org/stable/c/e2396b8a562073787e627a5f483f1bc5c452fa6a
- https://git.kernel.org/stable/c/7ac6e1ae41a09f1dd4baeeff1d028ae49ee01232