Wind River Support Network

Description

In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]bpf: Fix a data-race around bpf_jit_limit.[EOL][EOL]While reading bpf_jit_limit, it can be changed concurrently via sysctl,[EOL]WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit[EOL]is long, so we need to add a paired READ_ONCE() to avoid load-tearing.

 

========Wind River Notice========

It cannot backport directly due to context gap, the context changed represents a substantial amount of BPF subsystem evolution  that would be risky to backport as it could introduce regressions or compatibility issues.

 

*Mitigation:*

The default WindRiver Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. This would require a privileged user with CAP_SYS_ADMIN or root to be able to abuse this flaw reducing its attack space.

For the WindRiver Linux to confirm the current state, inspect the sysctl with the command:

cat /proc/sys/kernel/unprivileged_bpf_disabled

The setting of 1 would mean that unprivileged users can not use eBPF, mitigating the flaw.

 

CVEs

• CVE-2022-49967