bpf: Mark bpf_btf_find_by_name_kind() as sleepable (Linux Linux)

CVE-2026-98046
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.17 % · centile 7 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable When bpf_btf_find_by_name_kind() finds a type in module BTF, it returns a new BTF object fd through __btf_new_fd(). This reaches anon_inode_getfd(), which can sleep while allocating or expanding the current task fd table. The helper prototype does not set might_sleep, so the verifier allows the helper in non-sleepable contexts such as BPF timer callbacks. The fd allocation can then sleep in softirq context and install the fd into the interrupted task. Mark the helper as sleepable. This preserves calls from the main body of a sleepable syscall program while rejecting calls from its non-sleepable regions.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected 3d78417b60fba249cc555468cb72d96f5cde2964 < 7bf23cf7c9c0e0b5e638e497cdc0ec3f223742cc ; affected 3d78417b60fba249cc555468cb72d96f5cde2964 < b843ab43ac9d2fa1ddd0dab8d0dcc19dbf764e2f ; affected 3d78417b60fba249cc555468cb72d96f5cde2964 < 29e40175617216fbd4544529f6bfb51d1ab95ba1 ; affected 3d78417b60fba249cc555468cb72d96f5cde2964 < 4d8784226bd3c6a707975081f986078f40456cec ; affected 3d78417b60fba249cc555468cb72d96f5cde2964 < 17f54a8f2b9714529d56edbbe12d448ccdbbf469 ; affected 3d78417b60fba249cc555468cb72d96f5cde2964 < 620614bf7672130c43b3cff375525a2202f61979
Linux · Linuxaffected 5.14 ; unaffected 0 < 5.14 ; unaffected 6.1.189 ≤ 6.1.* ; unaffected 6.6.158 ≤ 6.6.* ; unaffected 6.12.111 ≤ 6.12.* ; unaffected 6.18.53 ≤ 6.18.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD