USN-5759-1: LibBPF vulnerabilities
It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cause LibBPF to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.10. (CVE-2021-45940, CVE-2021-45941, CVE-2022-3533) It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cause LibBPF to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-3534, CVE-2022-3606)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libbpf-devto a version that resolves this vulnerability.Fixed in 1:0.8.0-1ubuntu22.10.1 - Upgrade
Upgrade
ubuntu/libbpf-devto a version that resolves this vulnerability.Fixed in 1:0.5.0-1ubuntu22.04.1
Event History
Child vulnerabilities
Contains the following vulnerabilities.