| Severity |
|
| Remote |
|
| Type |
|
| Description |
| + |
It has been discovered that kernel/bpf/verifier.c in the Linux kernel before 4.14.9 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly have unspecified other impact by leveraging unrestricted integer values for pointer arithmetic. |
|
| References |
| + |
https://bugs.chromium.org/p/project-zero/issues/detail?id=1454 |
| + |
http://www.openwall.com/lists/oss-security/2017/12/21/2 |
| + |
https://git.kernel.org/linus/bb7f0f989ca7de1153bd128a40a71709e339fa03 |
|
| Notes |
| + |
Workaround by disabling unprivileged bpf: |
| + |
sysctl -w kernel.unprivileged_bpf_disabled=1 |
|