PT-2025-53163 · Linux+1 · Linux Kernel+1
CVE-2023-54086
·
Publicado
2023-04-13
·
Atualizado
2025-12-25
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.2.0 #4
Description
The Linux kernel contained a flaw related to the handling of recursion checks within the Berkeley Packet Filter (BPF) subsystem. Specifically, the
preempt count {sub,add} functions were called after the prog->active flag was decreased in bpf prog exit recur, leading to a potential kernel panic. The issue stemmed from insufficient protection of preempt count {sub,add} during trampoline attachment. The fix involves adding these functions to the BTF ID deny list.Recommendations
Update to a version of the Linux kernel newer than 6.2.0 #4.
Exploit
Correção
Uncontrolled Recursion
Improper Resource Release
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Linux Kernel