Total vulnerabilities in the database
The adjust_branches function in kernel/bpf/verifier.c in the Linux kernel before 4.5 does not consider the delta in the backward-jump case, which allows local users to obtain sensitive information from kernel memory by creating a packet filter and then loading crafted BPF instructions.
Software | From | Fixed in |
---|---|---|
linux / linux_kernel | 4.5.0-rc1 | 4.5.0-rc1.x |
linux / linux_kernel | - | 4.5.0 |
linux / linux_kernel | 4.5.0-rc2 | 4.5.0-rc2.x |
linux / linux_kernel | 4.5.0-rc3 | 4.5.0-rc3.x |
canonical / ubuntu_linux | 15.10 | 15.10.x |
opensuse / leap | 42.1 | 42.1.x |
canonical / ubuntu_linux | 14.04 | 14.04.x |