APPLIED: [SRU][F][PATCH 0/1] CVE-2024-42068

[Stefan Bader]

On 10.10.24 13:14, Massimiliano Pellizzer wrote:
> [Impact]
> 
> bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
> 
> set_memory_ro() can fail, leaving memory unprotected.
> Check its return and take it into account as an error.
> 
> [Fix]
> 
> Noble: 	Fixed
> Jammy: 	Fixed
> Focal: 	Backported from linux-6.9.y
> Bionic: Sent to ESM ML
> Xenial: Sent to ESM ML
> 
> [Test Case]
> 
> Compile and boot tested.
> 
> [Where problems could occur]
> 
> The fix affects the eBPF subsystem, particularly memory protection in
> BPF programs. An issue with this fix may lead to kernel crashes during
> memory operations, especially when using eBPF-based tools. Users could
> also experience application crashes or failures in eBPF dependent
> applications.
> 
> Christophe Leroy (1):
>    bpf: Take return from set_memory_ro() into account with
>      bpf_prog_lock_ro()
> 
>   include/linux/filter.h | 5 +++--
>   kernel/bpf/core.c      | 4 +++-
>   kernel/bpf/verifier.c  | 8 ++++++--
>   3 files changed, 12 insertions(+), 5 deletions(-)
> 

Applied to focal:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20241025/c43d2435/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20241025/c43d2435/attachment-0001.sig>