In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
bpf, xdp: move offload check into dev_xdp_install()<\/p>\n
bpf_xdp_link_update() calls dev_xdp_install() directly and skips
\ndev_xdp_attach(), so the checks in dev_xdp_attach() do not run. A user can
\nmake an XDP link with a normal program and then swap in an offloaded or
\ndevice-bound program with BPF_LINK_UPDATE, which puts it on the software
\npath.<\/p>\n
dev_xdp_install() is the one place all three paths go through:
\n“ip link set xdp” and BPF_LINK_CREATE reach it via dev_xdp_attach(), and
\nBPF_LINK_UPDATE calls it directly. So move the program checks (offloaded,
\nbound to another device, device-bound in generic mode, native vs generic,
\nDEVMAP and CPUMAP) there, and keep only the netlink-flag check
\n(XDP_FLAGS_UPDATE_IF_NOEXIST) in dev_xdp_attach().<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
bpf, xdp: move offload check into dev_xdp_install()<\/p>\n
bpf_xdp_link_update() calls dev_xdp_install() directly and skips
\ndev_xdp_attac<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25555","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}