CVE-2022-49967

bpf: Fix a data-race around bpf_jit_limit.

Summary

Original description

The description as published by the source.

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix a data-race around bpf_jit_limit.

While reading bpf_jit_limit, it can be changed concurrently via sysctl,
WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit
is long, so we need to add a paired READ_ONCE() to avoid load-tearing.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Linux Kernel

[{"type":"ECOSYSTEM","events":[{"introduced":"4.20.0"},{"fixed":"5.19.8"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2022-49967 linux
Ubuntu UBUNTU-CVE-2022-49967 linux-azure

References

advisory github.com
advisory nvd.nist.gov
package git.kernel.org
web git.kernel.org
web git.kernel.org