CVE-2022-50654

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0 #5

Description The Linux kernel contained a flaw related to the handling of page attributes within the BPF (Berkeley Packet Filter) subsystem. Specifically, a panic could occur when livepatch and kretfunc were used concurrently. This was due to an incorrect page attribute setting for the im->image structure, leading to a fault during read/write operations. The issue was triggered when arch prepare bpf trampoline was re-executed after modify fentry or register fentry returned -EAGAIN from bpf tramp ftrace ops func. The root cause was the pageattr of im->image being set to rox, causing a fault when arch prepare bpf trampoline attempted to read and write to it.

Recommendations Update to a version newer than 6.1.0 #5.