Linux Kernel sunrpc: Fix infinite loop and log spam due to EPERM remapping in xs_tcp_setup_socket

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Type: net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket - Impact: Remaps EPERM error when connection fails. 2. Root Cause: - When using BPF programs, the function may return an EPERM error, causing the function to enter an infinite loop, filling up system logs, and potentially leading to kernel freeze. 3. Mitigation Measures: - Remap the EPERM error to another error that cannot be handled, such as ECONNREFUSED or ENETDOWN. - It is recommended to map EPERM to a more common error like ECONNREFUSED to ensure consistent behavior when encountering different errors. 4. Fix Code: - The fix is located in the file , specifically modifying the function. 5. Fix Details: - Modified the error handling logic in the function by adding handling for the EPERM error, remapping it to ECONNREFUSED. 6. Scope of Fix: - The fix addresses multiple related error codes and issues, including: - d74bad4e74ee ("bpf: Hooks for sys_connect") - 4fbac77d2d09 ("bpf: Hooks for sys_bind") - 626dfed5fa3bfb41e0dffd796032b555b69f9cde ("upstream") 7. Fix Authors: - The fix was completed by Daniel Borkmann and Greg Kroah-Hartman. 8. Fix Status: - The fix has been merged into the upstream version. With this information, one can understand the background, impact, mitigation measures, and scope of the fix, which helps in assessing and comprehending the severity and resolution status of the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel sunrpc: Fix infinite loop and log spam due to EPERM remapping in xs_tcp_setup_socket