CVE-2022-48714

bpf: Use VM_MAP instead of VM_ALLOC for ringbuf

published June 20, 2024

CVSS
—
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Use VM_MAP instead of VM_ALLOC for ringbuf

After commit 2fd3fb0be1d1 ("kasan, vmalloc: unpoison VM_ALLOC pages

after mapping"), non-VM_ALLOC mappings will be marked as accessible

in __get_vm_area_node() when KASAN is enabled. But now the flag for

ringbuf area is VM_ALLOC, so KASAN will complain out-of-bound access

after vmap() returns. Because the ringbuf area is created by mapping

allocated pages, so use VM_MAP instead.

After the change, info in /proc/vmallocinfo also changes from

[start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmalloc user

to

[start]-[end] 24576 ringbuf_map_alloc+0x171/0x290 vmap user

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Published
2024-06-20T11:13Z
EPSS history
Timeline
  • 20 JUN 11:13Z
    bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
    cvelistv5