References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

https://git.kernel.org/stable/c/1fd91360a75833b7110af9834ae26c977e1273e0

https://git.kernel.org/stable/c/9bf48fa19a4b1d186e08b20bf7e5de26a15644fb

https://git.kernel.org/stable/c/ef80b59acfa4dee4b5eaccb15572b69248831104

In the Linux kernel, the following vulnerability has been resolved:

libbpf: Prevent null-pointer dereference when prog to load has no BTF

In bpf_objec_load_prog(), there's no guarantee that obj->btf is non-NULL
when passing it to btf__fd(), and this function does not perform any
check before dereferencing its argument (as bpf_object__btf_fd() used to
do). As a consequence, we get segmentation fault errors in bpftool (for
example) when trying to load programs that come without BTF information.

kernel.org https://git.kernel.org/stable/c/1fd91360a75833b7110af9834ae26c977e1273e0 [No types assigned]

kernel.org https://git.kernel.org/stable/c/9bf48fa19a4b1d186e08b20bf7e5de26a15644fb [No types assigned]

kernel.org https://git.kernel.org/stable/c/ef80b59acfa4dee4b5eaccb15572b69248831104 [No types assigned]