Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

John Fastabend

#23855of 60,400
12.2Total CVSS
Vulnerabilities · 2
Medium
2
PT-2025-8704
2022-06-23
6.7
CVE-2022-49732
Linux
Linux Kernel
A vulnerability in the Linux kernel has been resolved. The issue is related to the protection check for psock vs ULP. The `inet csk has ulp(sk)` check was moved from `sk psock init()` to the new `tcp bpf update proto()` function, potentially allowing the creation of psocks for non-inet sockets. However, the destruction path for psock includes the ULP unwind, requiring the `sk psock init()` to fail if ULP is already present. Otherwise, it may result in the ULP looping its callbacks.
PT-2024-11299
2021-07-15
5.5
CVE-2021-47298
Linux
Linux Kernel
A potential memory leak has been identified in the Linux kernel, specifically in the bpf and sockmap components. The issue arises when the `skb linearize` function is needed but fails, potentially leading to a memory leak during error handling. To address this, the fix ensures that the msg block is freed using `kfree` before returning an error. This issue was discovered during a code review.