High · published March 25, 2022
A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.10, < 5.15.37 | 5.15.37 |
| linux/linux_kernel | ≥ 5.16, < 5.16.11 | 5.16.11 |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |