Linux Kernel BPF LPM_TRIE Out-of-Bounds Write Fix

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Description: - Title: bpf: Fix out-of-bounds write in trie_get_next_key() - Description: The function may cause an out-of-bounds write when traversing the trie structure. Specifically, when is 8, the function attempts to write 9 nodes into , resulting in an out-of-bounds write. 2. Fix Measures: - Fix Code: A check was added in the function to ensure that the size of does not exceed . - Fix Code Example: 3. Fix Scope: - File: kernel/bpf/lpm_trie.c - Line Numbers: -655,7 +655,7 4. Fix Status: - Status: Fixed 表 - Author: Byeonguk Jeong - Commit Time: 2024-10-26 14:02:43 +0900 - Committer: Greg Kroah-Hartman - Commit Time: 2024-11-08 16:22:01 +0100 5. Reason for Fix: - Cause: Fixes an issue introduced by commit b471f2f1de8b ("bpf: implement MAP_GET_NEXT_KEY command for LPM_TRIE map"). 6. Testing and Verification: - Tester: Hou Tao - Verifiers: - Hou Tao - Alexei Starovoitov - Sasha Levin 7. Links: - Link: https://lore.kernel.org/r/Zxx384ZfdLFYnz6J@localhost.localdomain With this information, we can understand the detailed nature of the vulnerability, including its impact, the fix implemented, and the verification process, which is highly valuable for comprehending the vulnerability and its remediation.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel BPF LPM_TRIE Out-of-Bounds Write Fix